Unauthorized Code Execution in Tanium Threat Response Software
CVE-2026-108329

8.8HIGH

Key Information:

Vendor

Tanium

Status
Threat Response
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108329?

Tanium's Threat Response software has a vulnerability that allows unauthorized code execution, potentially enabling attackers to execute arbitrary commands on affected systems. This could lead to significant security risks, including unauthorized access to sensitive data and potential compromise of the affected network. Users of Tanium Threat Response are urged to apply available updates to mitigate this risk and protect their environments.

Affected Version(s)

Threat Response 4.9 < 4.9.476

Threat Response 4.12 < 4.12.349

Threat Response 4.17 < 4.17.327

References

https://security.tanium.com/TAN-2026-064

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.