Local Privilege Escalation Vulnerability in Tanium End-User Notifications
CVE-2026-108306

7.8HIGH

Key Information:

Vendor

Tanium

Status
Endpoint Configuration Toolset Solution
End-user-cx
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108306?

A local privilege escalation vulnerability exists in Tanium's End-User Notifications, which may allow unauthorized users to gain higher privileges on the affected systems. This flaw could potentially be exploited to alter system configurations or execute commands with elevated permissions, posing a significant risk to data integrity and system stability. Users are encouraged to apply the latest security updates provided by Tanium to safeguard their systems against potential exploitation.

Affected Version(s)

end-user-cx 1.8.47

end-user-cx 1.11.605

end-user-cx 1.19.325

References

https://security.tanium.com/TAN-2026-065

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.