EUVD-2026-81085
GHSA-x4m7-w7jf-mj86
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Network-reachable but requires an authenticated low-privileged account (PR:L); CWE-639 authorization flaw yields primarily integrity impact (I:H) with limited confidentiality (C:L) and no availability effect.
Primary rating from Vendor (Tanium).
CVSS VectorVendor: Tanium
Lifecycle Timeline
5DescriptionCVE.org
Tanium addressed an improper access controls vulnerability in Threat Response.
AnalysisAI
Improper access controls in Tanium Threat Response let an attacker who already holds a valid low-privileged account manipulate objects they should not be authorized to reach, producing a high integrity impact and limited confidentiality exposure. The flaw is network-reachable and low-complexity but is not pre-authentication: the CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N, base 7.1) confirms the attacker must first authenticate with low privileges, so the 'Authentication Bypass' tag in the source intelligence should be read as an authorization bypass rather than an unauthenticated entry point. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an existing authenticated but low-privileged account on Tanium Threat Response (PR:L) reachable over the network (AV:N); no user interaction is needed (UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N, base 7.1) describes a network-reachable, low-complexity flaw that nonetheless requires existing low-level authentication (PR:L) - consistent with CWE-639 (authorization bypass through user-controlled key / IDOR-style improper access controls) rather than a true pre-auth 'Authentication Bypass' as the input tag claims. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No patch version is specified in the available input data, so the fixed release for Tanium Threat Response must be confirmed directly from Tanium's advisory TAN-2026-048 (https://security.tanium.com/TAN-2026-048) and the module upgraded to the version named there; patch status for this CVE should be treated as advisory-dependent rather than assumed. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, review Tanium advisory TAN-2026-048 and inventory all instances of Tanium Threat Response; restrict access to the platform to only essential personnel with least privilege and enforce multi-factor authentication, and audit logs for any suspicious object manipulation by low-privileged accounts. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Threat Response
View allSQL injection in Tanium Threat Response (CVSS 3.1 base score 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) allows a low-priv
An authenticated server-side request forgery (SSRF) in Tanium Threat Response allows a user who already holds valid cons
Tanium addressed an information disclosure vulnerability in Threat Response. [CVSS 4.9 MEDIUM]
Tanium addressed an information disclosure vulnerability in Threat Response. [CVSS 4.9 MEDIUM]
Tanium addressed an information disclosure vulnerability in Threat Response. [CVSS 4.3 MEDIUM]
Tanium addressed an information disclosure vulnerability in Threat Response. [CVSS 4.3 MEDIUM]
Tanium addressed an information disclosure vulnerability in Threat Response. [CVSS 4.3 MEDIUM]
Improper access controls in Tanium Threat Response let an authenticated, high-privilege operator (PR:H) reach a function
Information disclosure vulnerability in Tanium Threat Response allows high-privileged authenticated users to access sens
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today