Sensitive Information Exposure in Tanium's Reputation Product
CVE-2026-108325

6.6MEDIUM

Key Information:

Vendor

Tanium

Status
Reputation
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108325?

Tanium has resolved a vulnerability in its Reputation product that involves the unintended insertion of sensitive information into log files. This could potentially allow unauthorized access to confidential data, which highlights the importance of thorough logging practices and security measures. Security professionals are advised to update to the latest version to mitigate the risk associated with this vulnerability. For more information, please refer to the detailed advisory at TAN-2026-067.

Affected Version(s)

Reputation 6.6 < 6.6.145

Reputation 6.7 < 6.7.138

Reputation 6.8 < 6.8.162

References

https://security.tanium.com/TAN-2026-067

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.