Improper Access Controls in Tanium Deploy Affects User Security
CVE-2025-15327

4.3MEDIUM

Key Information:

Vendor

Tanium

Status
Deploy
Vendor
CVE Published:
5 February 2026

What is CVE-2025-15327?

Tanium has identified a vulnerability within Deploy, specifically linked to improper access controls. This issue allows unauthorized users to gain access to sensitive functionalities and data, compromising the overall integrity of the system. It emphasizes the necessity for prompt updates to ensure that all security measures are effectively enforced and to mitigate potential risks associated with unauthorized data access.

Affected Version(s)

Deploy 2.26.0 < 2.26.1253

Deploy 2.30.0 < 2.30.150

References

https://security.tanium.com/TAN-2025-006

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.