CVE-2025-15315

Published: Feb 9, 2026Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Tanium addressed a local privilege escalation vulnerability in Tanium Module Server.

Affected (8)

Products: Tanium: Module Server, Server

2 products

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Tanium Module Server	From 7.4.6 to 7.4.6.1151
Tanium Module Server	From 7.5.6 to 7.5.6.1161
Tanium Module Server	From 7.6.2 to 7.6.2.1293
Tanium Module Server	From 7.6.4 to 7.6.4.2114
Tanium Server	From 7.4.6 to 7.4.6.1151
Tanium Server	From 7.5.6 to 7.5.6.1161
Tanium Server	From 7.6.2 to 7.6.2.1293
Tanium Server	From 7.6.4 to 7.6.4.2114

Related CWEs

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

References (1)

https://security.tanium.com/TAN-2025-011

Source: 3938794e-25f5-4123-a1ba-5cbd7f104512

Vendor Advisory

Timeline

No history available yet.