Tanium Server CVE-2026-108313

Exploitation requires the attacker to already hold high privileges on the Tanium Server (PR:H) and to meet a high-complexity precondition (AC:H) that is not detailed in the available sources; no user interaction is needed and the vector is network-reachable. Affected deployments are Tanium Server releases below 7.7.3.8351 (7.7.3 branch), below 7.8.2.1263 (7.8.2 branch), and below 7.8.4.1399 (7.8.4 branch); updating to the fixed versions per Tanium TAN-2026-054 is the remediation the vendor provides. The principal limiting factors are the pre-existing high-privilege requirement and the high attack complexity, which together make opportunistic or unauthenticated exploitation infeasible from this data.

This is a moderate-severity (CVSS 6.6) incorrect privilege assignment flaw in Tanium Server with full triad impact (C:H/I:H/A:H) but materially gated access requirements: the CVSS vector specifies AV:N (network), AC:H (high attack complexity) and PR:H (high privileges already required), with no user interaction and unchanged scope. The vuln.today decision label is 'this_month' rather than act_now or emergency, and the issue is not listed in CISA KEV; no EPSS score was supplied in the input and no public exploit or PoC reference is present. Taken together, the signals point to a real but non-urgent priority: an attacker must already hold high privileges on the server and clear a high-complexity bar, which sharply limits realistic opportunistic exploitation despite the network vector and high impact metrics. Two data conflicts should be verified with the vendor: the assigned CWE-178 (improper handling of case sensitivity) does not obviously match the stated 'incorrect privilege assignment' weakness, and the 'Information Disclosure' tag understates the CVSS claim of high integrity and availability impact - not just confidentiality. EPSS being absent (not low) means exploitation probability cannot be quantified from this data.

An attacker who has already obtained high-privilege access to a Tanium Server (for example a compromised administrative or service account) abuses the incorrect privilege assignment to gain access or control beyond their intended authorization boundary, affecting confidentiality, integrity and availability of the server. The high attack complexity (AC:H) implies the condition is not trivially reproducible, and no public exploit or PoC reference is identified at time of analysis; the exact trigger is not described in the available sources.