Uncontrolled Resource Consumption Vulnerability in Tanium Performance Client Extension
CVE-2026-108309

5.5MEDIUM

Key Information:

Vendor

Tanium

Status
Endpoint Configuration Toolset Solution
Performance-cx
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108309?

Tanium's Performance Client Extension is impacted by an uncontrolled resource consumption issue that could lead to performance degradation. This vulnerability arises when the application fails to manage resource allocation adequately, potentially allowing an attacker to exhaust system resources, thereby affecting system availability and performance. Users of the affected extension should apply the latest updates and patches as recommended by Tanium to mitigate the impact of this vulnerability.

Affected Version(s)

Endpoint Configuration Toolset Solution 1.51 < 1.51.60

Endpoint Configuration Toolset Solution 1.59 < 1.59.50

Endpoint Configuration Toolset Solution 1.71 < 1.71.25

References

https://security.tanium.com/TAN-2026-070

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.