Path Traversal Vulnerability in Tanium Data Service
CVE-2026-14505

6.6MEDIUM

Key Information:

Vendor

Tanium

Status
Tanium Data Service
Vendor
CVE Published:
9 September 2026

What is CVE-2026-14505?

A path traversal vulnerability in Tanium Data Service could allow an attacker to access files and directories outside the intended scope, potentially leading to unauthorized data exposure. This security issue emphasizes the necessity for proper input validation and access controls to protect sensitive information.

Affected Version(s)

Tanium Data Service 4.2 < 4.2.345

References

https://security.tanium.com/TAN-2026-044

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.