EUVD-2026-74544
GHSA-c2wm-w3vg-fr54
Severity by source
AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Local endpoint agent with CWE-78 command injection requiring user interaction and specific preconditions justifies AV:L, AC:H, UI:R; full CIA impact from arbitrary OS command execution at agent privilege level.
Primary rating from Vendor (Tanium).
CVSS VectorVendor: Tanium
Lifecycle Timeline
3DescriptionCVE.org
Tanium addressed an unauthorized code execution vulnerability in Enforce.
AnalysisAI
OS command injection in Tanium Enforce enables a local attacker to execute arbitrary operating system commands at the privilege level of the Enforce agent process. The flaw (CWE-78) requires user interaction and specific exploitation preconditions, reflected in a CVSS 7.0 score despite full C:H/I:H/A:H impact ratings. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a local presence on the endpoint running Tanium Enforce (AV:L) - remote network-based exploitation is not indicated by the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H establishes a meaningful set of exploitation constraints: local access is required, attack complexity is high, and user interaction must occur, collectively suppressing what would otherwise be a critical-rated vulnerability down to 7.0. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult Tanium advisory TAN-2026-022 (https://security.tanium.com/TAN-2026-022) for the exact patched release of Tanium Enforce; no specific fix version is confirmed from the available intelligence data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify and catalog all Tanium Enforce deployments across your environment, and reinforce local access controls to minimize exposure to local attack vectors. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Server-side request forgery in Tanium Enforce allows authenticated low-privileged users to cause the Enforce server to i
Tanium addressed an incorrect default permissions vulnerability in Enforce. [CVSS 6.5 MEDIUM]
Tanium addressed an improper link resolution before file access vulnerability in Enforce. [CVSS 5.0 MEDIUM]
Same weakness CWE-78 – OS Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today