Path Traversal Vulnerability in Tanium Comply Software
CVE-2026-87030

8.5HIGH

Key Information:

Vendor

Tanium

Status
Comply
Vendor
CVE Published:
9 September 2026

What is CVE-2026-87030?

A path traversal vulnerability exists in Tanium Comply, which could potentially allow attackers to access restricted directories and execute unauthorized actions on the system. This issue underscores the importance of proper input validation and access controls within the software.

Affected Version(s)

Comply 2.32 < 2.32.252

Comply 2.35 < 2.35.306

Comply 2.37 < 2.37.308

References

https://security.tanium.com/TAN-2026-043

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.