Improper Link Resolution Vulnerability in Tanium Threat Response Client Extension
CVE-2026-108332

6.3MEDIUM

Key Information:

Vendor

Tanium

Status
Endpoint Configuration Toolset Solution
Threat-response-cx
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108332?

The vulnerability in the Tanium Threat Response Client Extension arises from improper link resolution prior to file access. This flaw could potentially allow an attacker to exploit the system, leading to unauthorized access or modification of files. Organizations using this product should take immediate steps to review their operations and implement patches or updates to mitigate risks associated with this issue.

Affected Version(s)

Endpoint Configuration Toolset Solution 1.51.0 < 1.51.60

Endpoint Configuration Toolset Solution 1.59.0 < 1.59.50

Endpoint Configuration Toolset Solution 1.71.0 < 1.71.25

References

https://security.tanium.com/TAN-2026-055

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.