EUVD-2026-81080
GHSA-f4p5-qmg7-r4m5
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Authenticated (PR:L, low-priv console account) network SQLi with low complexity; C:H certain for injection, I:H/A:H retained per vendor assertion of full DB impact.
Primary rating from Vendor (Tanium).
CVSS VectorVendor: Tanium
Lifecycle Timeline
3DescriptionCVE.org
Tanium addressed a SQL injection vulnerability in Asset.
AnalysisAI
SQL injection in the Tanium Asset module allows a remote attacker who already holds a valid Tanium console session with Asset-module authorization to execute arbitrary SQL through an undisclosed injectable input, with high impact to confidentiality, integrity, and availability (CVSS 3.1 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability is an authenticated-adjacent issue: the PR:L vector means the attacker must first obtain console credentials and Asset authorization, and the target must have the optional Asset module deployed, which narrows the exposed population below Tanium's overall install base. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated Tanium console session with access to the Asset module (PR:L) reachable over the network (AV:N); no user interaction is needed once authenticated (UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine mid-to-high priority issue but not a drop-everything emergency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-fixed release of the Tanium Asset module as documented in Tanium security advisory TAN-2026-049 (https://security.tanium.com/TAN-2026-049); because the input data does not include an explicit fixed version string, confirm the exact patched build number in that advisory and upgrade the module rather than assuming the current version is remediated. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm whether the Tanium Asset module is deployed in your environment and, if so, inventory every console account and role that carries Asset-module authorization; review Tanium console and database audit logs for anomalous or unexpected SQL activity, and open a case with Tanium referencing advisory TAN-2026-049 to obtain the fix version and release timeline. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
SQL injection in the Tanium Asset module lets a high-privilege authenticated console user execute arbitrary SQL against
Tanium addressed a SQL injection vulnerability in Asset. [CVSS 6.3 MEDIUM]
Tanium addressed a SQL injection vulnerability in Asset. [CVSS 6.3 MEDIUM]
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today