Improper Access Controls in Tanium Interact
CVE-2025-15289

3.1LOW

Key Information:

Vendor

Tanium

Status
Interact
Vendor
CVE Published:
5 February 2026

What is CVE-2025-15289?

Tanium has identified a vulnerability in the Interact product, primarily related to improper access controls. This flaw allows unauthorized users to gain access to sensitive features or data, potentially compromising the confidentiality and integrity of the information managed by Tanium Interact. Organizations using this product should take immediate action to patch or mitigate the vulnerability to prevent any unauthorized access.

Affected Version(s)

Interact 3.1.0 < 3.1.337

Interact 3.2.0 < 3.2.185

Interact 3.5.0 < 3.5.90

References

https://security.tanium.com/TAN-2025-033

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.