Path Traversal Vulnerability in Tanium Data Service
CVE-2026-108327

5MEDIUM

Key Information:

Vendor

Tanium

Status
Tanium Data Service
Interact
Vendor
CVE Published:
3 November 2026

What is CVE-2026-108327?

A path traversal vulnerability in Tanium Data Service allows an attacker to traverse the file system and access restricted files. This security flaw could potentially lead to unauthorized information disclosure, compromising the integrity and confidentiality of the system. It is crucial for users to update their software promptly to mitigate risks associated with this vulnerability.

Affected Version(s)

Interact 3.5.0 < 3.5.141

Tanium Data Service 4.1 < 4.1.281

Tanium Data Service 4.2 < 4.2.360

References

https://security.tanium.com/TAN-2026-082

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.