CVE-2025-15319

Published: Feb 9, 2026Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 3938794e-25f5-4123-a1ba-5cbd7f104512 (Secondary)

Description

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.

Affected (5)

Products: Tanium: Patch Endpoint Tools

1 product

Patch Endpoint Tools

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Tanium Patch Endpoint Tools	From 10.1 to 10.1.50
Tanium Patch Endpoint Tools	From 10.11 to 10.11.27
Tanium Patch Endpoint Tools	From 10.7 to 10.7.25
Tanium Patch Endpoint Tools	From 10.9 to 10.9.31
Tanium Patch Endpoint Tools	From 3.17 to 3.17.10207

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (1)

https://security.tanium.com/TAN-2025-021

Source: 3938794e-25f5-4123-a1ba-5cbd7f104512

Vendor Advisory

Timeline

No history available yet.