EUVD-2026-81082
GHSA-2jx4-xhg9-69q9
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Network-reachable console SQLi requiring a high-privilege account (PR:H) and no user interaction; SQLi permits full read/write/destroy of backend data, so C:H/I:H/A:H.
Primary rating from Vendor (Tanium).
CVSS VectorVendor: Tanium
Lifecycle Timeline
6DescriptionCVE.org
Tanium addressed a SQL injection vulnerability in Asset.
AnalysisAI
SQL injection in the Tanium Asset module lets a high-privilege authenticated console user execute arbitrary SQL against the Asset data store, with the potential to read, modify, or destroy data the module manages (CVSS 3.1 base 7.2, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The flaw is remotely reachable and requires no user interaction, but it is gated on two conditions: the optional Asset module must be deployed, and the attacker must already hold an elevated Tanium console session - a self-service or low-privilege account is insufficient. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a valid high-privilege authenticated Tanium console session (PR:H) with access to the Asset module - a self-service or low-privilege account is insufficient. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, base 7.2) describes a network-reachable, low-complexity SQL injection whose principal limiter is PR:H - the attacker must already hold a high-privilege authenticated Tanium console account. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade Tanium Asset to 1.33.326, 1.36.174, or 1.39.153 (or later within the corresponding maintenance line), as documented in Tanium advisory TAN-2026-046 at https://security.tanium.com/TAN-2026-046. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all Tanium Asset module deployments and verify whether they are running an affected build (Asset before 1.33.326, before 1.36.174, or before 1.39.153); if any are exposed or support critical operations, apply the vendor-released patch (1.33.326, 1.36.174, or 1.39.153) as an emergency change. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
SQL injection in the Tanium Asset module allows a remote attacker who already holds a valid Tanium console session with
Tanium addressed a SQL injection vulnerability in Asset. [CVSS 6.3 MEDIUM]
Tanium addressed a SQL injection vulnerability in Asset. [CVSS 6.3 MEDIUM]
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today