Improper Access Controls in Tanium Comply
CVE-2026-108301

6MEDIUM

Key Information:

Vendor

Tanium

Status
Comply
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108301?

An improper access controls vulnerability in Tanium's Comply product could potentially allow unauthorized users to access sensitive functionalities and data. The flaw highlights the importance of robust access control measures to maintain the integrity and confidentiality of information within enterprise systems. Organizations using Tanium Comply should ensure that they apply the necessary patches and implement best security practices to mitigate potential risks.

Affected Version(s)

Comply 2.32 < 2.32.263

Comply 2.35 < 2.35.323

Comply 2.37 < 2.37.326

References

https://security.tanium.com/TAN-2026-066

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.