CVE-2025-15314

Published: Feb 10, 2026Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.

Affected (3)

Products: Tanium: End User Cx

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Tanium End User Cx	From 1.4 to 1.4.1175
Tanium End User Cx	From 1.6 to 1.6.926
Tanium End User Cx	From 1.8 to 1.8.21

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (1)

https://security.tanium.com/TAN-2025-010

Source: 3938794e-25f5-4123-a1ba-5cbd7f104512

Vendor Advisory

Timeline

No history available yet.