Read the docs
TI-2026-81460 Aliases CVE-2026-108304GHSA-h4h8-mrp6-q22g

Local privilege escalation in Tanium End-User Notifications

Priority LOW 35CWE-282Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Tanium Endpoint Configuration Toolset Solution and end-user-cx contain a local privilege escalation flaw in End-User Notifications. Improper link resolution before file access (CWE-59) and improper ownership management let a local user with low privileges gain higher privileges. A successful attacker can fully compromise confidentiality, integrity and availability.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Description from the CNA

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00121 1st percentileScored 2026-11-07
Fix Fixed Endpoint Configuration Toolset Solution (Tanium): 1.51.60, 1.59.50, 1.71.25end-user-cx (Tanium): 1.8.47, 1.11.605, 1.19.325 +4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TaniumEndpoint Configuration Toolset Solution1.51 to before 1.51.60; 1.59 to before 1.59.50; 1.71 to before 1.71.251.51.60, 1.59.50, 1.71.25Patch availableCNA
Taniumend-user-cx1.8.47 to before 1.8.47; 1.11.605 to before 1.11.605; 1.19.325 to before 1.19.325; 1.21.835 to before 1.21.835; 1.22.1199 to before 1.22.1199; 1.23.766 to before 1.23.766; 1.24.590 to before 1.24.5901.8.47, 1.11.605, 1.19.325, 1.21.835, 1.22.1199, 1.23.766, 1.24.590Patch availableCNA
  • Endpoint Configuration Toolset Solution VendorTanium Affected 1.51 to before 1.51.60; 1.59 to before 1.59.50; 1.71 to before 1.71.25 Fixed in 1.51.60, 1.59.50, 1.71.25 Patch available CNA
  • end-user-cx VendorTanium Affected 1.8.47 to before 1.8.47; 1.11.605 to before 1.11.605; 1.19.325 to before 1.19.325; 1.21.835 to before 1.21.835; 1.22.1199 to before 1.22.1199; 1.23.766 to before 1.23.766; 1.24.590 to before 1.24.590 Fixed in 1.8.47, 1.11.605, 1.19.325, 1.21.835, 1.22.1199, 1.23.766, 1.24.590 Patch available CNA

Remediation

Update Tanium Endpoint Configuration Toolset Solution to 1.51.60, 1.59.50 or 1.71.25. Update end-user-cx to 1.8.47, 1.11.605, 1.19.325, 1.21.835, 1.22.1199, 1.23.766 or 1.24.590.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

  • Fix · CNA Endpoint Configuration Toolset Solution (Tanium) Fixed in 1.51.60, 1.59.50, 1.71.25
  • Fix · CNA end-user-cx (Tanium) Fixed in 1.8.47, 1.11.605, 1.19.325, 1.21.835, 1.22.1199, 1.23.766, 1.24.590

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Tanium Endpoint Configuration Toolset Solution 1.51.60, 1.59.50, 1.71.25

    10 records Highest priority Priority LOW 10 LOW

    Other records, highest priority first

    • TI-2026-81463 Heap-based buffer overflow in Tanium IndexPriority LOW 35
    • TI-2026-81462 Local privilege escalation in Tanium End-User NotificationsPriority LOW 35
    • TI-2026-81461 Local privilege escalation in Tanium End-User NotificationsPriority LOW 35
    Show all 10 records →
  • Release ·

    Tanium end-user-cx 1.11.605, 1.19.325 and 5 more versions

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2026-81462 Local privilege escalation in Tanium End-User NotificationsPriority LOW 35
    • TI-2026-81461 Local privilege escalation in Tanium End-User NotificationsPriority LOW 35
    Show all 3 records →

Timeline

  1. 2026-10-27 Threatist record created from CVE-2026-108304
  2. 2026-10-27 Alias added: GHSA-h4h8-mrp6-q22g
  3. 2026-10-28 Priority changed: MEDIUM → LOW
  4. 2026-11-04 CISA SSVC decision points changed

References

Other 1

  • TI-2026-81473 Unauthorized code execution in Tanium Threat Response CVSS 3.1HIGH 8.8
  • TI-2026-81459 Tanium Certificate Manager unauthorized code execution vulnerability CVSS 3.1HIGH 8.8
  • TI-2026-59476 Tanium addressed a SQL injection vulnerability in Threat Response. CVSS 3.1HIGH 8.8
  • TI-2026-08094 Tanium addressed an unauthorized code execution vulnerability in Connect. CVSS 3.1HIGH 8.8
  • TI-2026-08093 Tanium addressed an unauthorized code execution vulnerability in Connect. CVSS 3.1HIGH 8.8
  • TI-2025-13983 Tanium addressed an improper input validation vulnerability in Deploy. CVSS 3.1HIGH 8.8
See all 135 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences