Incorrect Privilege Assignment Vulnerability in Tanium Server
CVE-2026-108313

6.6MEDIUM

Key Information:

Vendor

Tanium

Status
Tanium Server
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108313?

An incorrect privilege assignment vulnerability has been identified in Tanium Server, which could allow unauthorized users to gain elevated privileges. This security flaw may lead to unauthorized access to sensitive functions and data, impacting the integrity and confidentiality of the system. Users are advised to update to the patched versions to mitigate the risk associated with this vulnerability.

Affected Version(s)

Tanium Server 7.7.3 < 7.7.3.8351

Tanium Server 7.8.2 < 7.8.2.1263

Tanium Server 7.8.4 < 7.8.4.1399

References

https://security.tanium.com/TAN-2026-054

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.