EUVD-2026-81081
GHSA-3p85-82gq-6c7j
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Authenticated Tanium console access is required (PR:L) over the network (AV:N); confidentiality-only impact (C:H, generous for a terse description) with no integrity or availability effect.
Primary rating from Vendor (Tanium).
CVSS VectorVendor: Tanium
Lifecycle Timeline
2DescriptionCVE.org
Tanium addressed an information disclosure vulnerability in Discover.
AnalysisAI
Information disclosure in the Tanium Discover module allows an authenticated console user to read data they should not have access to, with the vendor confirming the flaw has been addressed. The vulnerability requires network reachability and a valid low-privilege Tanium session (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, base 6.5) but no user interaction, and it affects only organizations that have licensed and deployed the optional Discover component. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a valid authenticated session to the Tanium Discover module (PR:L - a low-privilege Tanium console account or equivalent credential). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a moderate-severity issue that does not rise to urgent priority. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Tanium fix referenced in advisory TAN-2026-024 (https://security.tanium.com/TAN-2026-024); the advisory states the issue has been addressed, so upgrade Discover to the vendor-designated fixed build - the exact version is not specified in the available data and must be read from the advisory before scheduling the change. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially
Tanium addressed an incorrect default permissions vulnerability in Discover. [CVSS 6.5 MEDIUM]
Tanium addressed an improper input validation vulnerability in Discover. [CVSS 6.3 MEDIUM]
Tanium addressed an uncontrolled resource consumption vulnerability in Discover. [CVSS 4.9 MEDIUM]
Tanium addressed an improper input validation vulnerability in Discover. [CVSS 2.7 LOW]
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today