Skip to main content

Tanium Connect CVE-2026-9208

| EUVD-2026-32667 HIGH
OS Command Injection (CWE-78)
2026-05-27 Tanium GHSA-2qj8-f68j-jw3x
RCE Command Injection
8.8
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Patch available
May 27, 2026 - 23:03 EUVD
Analysis Generated
May 27, 2026 - 22:01 vuln.today

DescriptionNVD

Tanium addressed an unauthorized code execution vulnerability in Connect.

AnalysisAI

Unauthorized OS command execution in Tanium Connect allows an attacker holding low-privilege authenticated access to run arbitrary commands on the host, achieving full compromise of confidentiality, integrity, and availability. The CVSS 8.8 (network vector, low complexity, low privileges, no user interaction) reflects an authenticated remote code execution issue rooted in command injection (CWE-78). …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

24 hours: Inventory all systems running Tanium Connect; document current versions and user access levels; restrict Connect access to only essential personnel. 7 days: Implement network segmentation to isolate Tanium-managed endpoints; enable audit logging on all Connect administrative and command activities. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

CVE-2026-9208 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy