Improper Access Controls Vulnerability in Tanium Patch Product
CVE-2025-15326

4.3MEDIUM

Key Information:

Vendor

Tanium

Status
Patch
Vendor
CVE Published:
5 February 2026

What is CVE-2025-15326?

Tanium has identified an improper access controls vulnerability within its Patch product. This vulnerability could potentially allow unauthorized users to access sensitive actions or alter configurations, compromising the integrity of security protocols. Users are advised to implement the available patches to safeguard their systems against any exploits resulting from this vulnerability.

Affected Version(s)

Patch 3.17.0 < 3.17.2262

Patch 3.19.0 < 3.19.195

References

https://security.tanium.com/TAN-2025-006

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.