Tanium Data Service
Monthly
Path traversal (CWE-22) in Tanium Data Service, with Tanium Interact also listed among the affected components, allows a high-privileged, authenticated attacker reaching the service over the network to manipulate files in a way that compromises integrity (rated High) and, to a lesser degree, availability (Low), with no confidentiality impact. Tanium reports it has addressed the issue in advisory TAN-2026-082, and the CVSS 3.1 base score is 5.0 (AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L). No public exploit code or confirmed active exploitation was identified at time of analysis, and the vuln.today priority decision places it in the this_month remediation cadence rather than an emergency one.
Path traversal in Tanium Data Service 4.2 prior to build 4.2.345 allows a highly privileged, remote-authenticated attacker to read, write, or otherwise manipulate files outside the application's intended directory scope. Tanium addressed this in their security advisory TAN-2026-044 with a patch to build 4.2.345. No public exploit or active exploitation has been identified at time of analysis.
Path traversal (CWE-22) in Tanium Data Service, with Tanium Interact also listed among the affected components, allows a high-privileged, authenticated attacker reaching the service over the network to manipulate files in a way that compromises integrity (rated High) and, to a lesser degree, availability (Low), with no confidentiality impact. Tanium reports it has addressed the issue in advisory TAN-2026-082, and the CVSS 3.1 base score is 5.0 (AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L). No public exploit code or confirmed active exploitation was identified at time of analysis, and the vuln.today priority decision places it in the this_month remediation cadence rather than an emergency one.
Path traversal in Tanium Data Service 4.2 prior to build 4.2.345 allows a highly privileged, remote-authenticated attacker to read, write, or otherwise manipulate files outside the application's intended directory scope. Tanium addressed this in their security advisory TAN-2026-044 with a patch to build 4.2.345. No public exploit or active exploitation has been identified at time of analysis.