Local Privilege Escalation in Tanium End-User Notifications
CVE-2026-108305

7.8HIGH

Key Information:

Vendor

Tanium

Status
Endpoint Configuration Toolset Solution
End-user-cx
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108305?

A local privilege escalation vulnerability exists within Tanium End-User Notifications, allowing unauthorized users to gain elevated privileges. This security flaw can potentially enable malicious actors to execute arbitrary code or access sensitive system resources, posing risks to the integrity and confidentiality of the system. Proper updates and patches are crucial to mitigate this vulnerability and secure affected installations.

Affected Version(s)

end-user-cx 1.8.47

end-user-cx 1.11.605

end-user-cx 1.19.325

References

https://security.tanium.com/TAN-2026-061

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.