CVE-2026-12139

Published: Jul 21, 2026Modified: Aug 18, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Tanium addressed an information disclosure vulnerability in Connect.

Affected (3)

Products: Tanium: Connect

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Tanium Connect	From 5.29.0 to 5.29.251
Tanium Connect	From 5.37.0 to 5.37.156
Tanium Connect	From 5.47.0 to 5.47.112

Related CWEs

Invocation of Process Using Visible Sensitive Information

A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.

References (1)

https://security.tanium.com/TAN-2026-018

Source: 3938794e-25f5-4123-a1ba-5cbd7f104512

Vendor Advisory

Timeline

No history available yet.