CVE-2025-15321

Published: Feb 5, 2026Modified: Jun 17, 2026

2.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.2 / Impact: 1.4

Source: NVD

Description

Tanium addressed an improper input validation vulnerability in Tanium Appliance.

Affected (3)

Products: Tanium: Tanos

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Tanium Tanos	From 1.8.3 to 1.8.3.0196
Tanium Tanos	From 1.8.4 to 1.8.4.0199
Tanium Tanos	From 1.8.5 to 1.8.5.0227

Related CWEs

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

https://security.tanium.com/TAN-2025-024

Source: 3938794e-25f5-4123-a1ba-5cbd7f104512

Vendor Advisory

Timeline

No history available yet.