CVE-2025-15319

Published: Feb 9, 2026Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 3938794e-25f5-4123-a1ba-5cbd7f104512 (Secondary)

Description

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.

Affected (5)

Products: Tanium: Patch Endpoint Tools

1 product

Patch Endpoint Tools

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Tanium Patch Endpoint Tools	10.1 ≤ version < 10.1.50
Tanium Patch Endpoint Tools	10.11 ≤ version < 10.11.27
Tanium Patch Endpoint Tools	10.7 ≤ version < 10.7.25
Tanium Patch Endpoint Tools	10.9 ≤ version < 10.9.31
Tanium Patch Endpoint Tools	3.17 ≤ version < 3.17.10207

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (1)

https://security.tanium.com/TAN-2025-021

Source: 3938794e-25f5-4123-a1ba-5cbd7f104512

Vendor Advisory

Timeline

No history available yet.