Sensitive Information Insertion Vulnerability in TanOS by Tanium
CVE-2026-2605

5.3MEDIUM

Key Information:

Vendor

Tanium

Status
Tanos
Vendor
CVE Published:
19 February 2026

What is CVE-2026-2605?

An insertion of sensitive information into log files was identified in TanOS, impacting the ability to securely manage sensitive data. This vulnerability could potentially expose confidential details stored in log files, necessitating prompt remediation actions to protect user data.

Affected Version(s)

TanOS 1.8.4 < 1.8.4.0249

TanOS 1.8.5 < 1.8.5.0282

TanOS 1.8.6 < 1.8.6.0150

References

https://security.tanium.com/TAN-2026-006

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.