[ CVE-2026-108332 · Published 27 Oct 2026 ]

Vulnerability in Tanium Endpoint Configuration Toolset Solution

CVSS 6.3 EPSS <1%No fix listed yet

[ Description ]Official description

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

security.tanium.com/TAN-2026-055

[ Facts ]Key facts

CVE: CVE-2026-108332
EUVD: EUVD-2026-111260
Published: 27 Oct 2026, 18:17 UTC
Updated: 4 Nov 2026, 21:17 UTC
NVD status: Awaiting Analysis
CVSS 3.1: 6.3 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Scored by 3938794e-25f5-4123-a1ba-5cbd7f104512
EPSS: 0.15% chance of exploitation in 30 days · higher than 4% of CVEs
CISA SSVC: Exploitation: none · Automatable: no · Impact: total
Weakness: CWE-59

[ Affected ]Affected products

Tanium Endpoint Configuration Toolset Solution1.51.0 – < 1.51.60, 1.59.0 – < 1.59.50, 1.71.0 – < 1.71.25
Tanium threat-response-cx1.17.802 – < 1.17.802, 1.18.2732 – < 1.18.2732, 1.19.2213 – < 1.19.2213, 1.20.2271 – < 1.20.2271, 1.21.1673 – < 1.21.1673