Read the docs
TI-2026-84838 Aliases CVE-2026-121565GHSA-ww98-p29q-34hf

Improper certificate validation in multiple Tanium products

Priority LOW 34CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Spoofing
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-295.

Summary

Tanium products including TanOS, Asset, Comply, Connect, Integrity Monitor, and other products are affected by improper certificate validation (CWE-295). The products trust intermediate CA certificates whose private keys were compromised. A remote attacker without privileges or user interaction can, under high attack complexity, abuse this trust to affect confidentiality and integrity.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Description from the CNA

Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00163 5th percentileScored 2026-11-07
Fix Fixed TanOS (Tanium): 1.8.5.0326, 1.8.6.0193, 1.9.0.0089Asset (Tanium): 1.33.334, 1.36.182, 1.39.164+11 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TaniumTanOS1.8.5 to before 1.8.5.0326; 1.8.6 to before 1.8.6.0193; 1.9.0 to before 1.9.0.00891.8.5.0326, 1.8.6.0193, 1.9.0.0089Patch availableCNA
TaniumAsset1.33 to before 1.33.334; 1.36 to before 1.36.182; 1.39 to before 1.39.1641.33.334, 1.36.182, 1.39.164Patch availableCNA
TaniumComply2.32 to before 2.32.275; 2.35 to before 2.35.337; 2.37 to before 2.37.3472.32.275, 2.35.337, 2.37.347Patch availableCNA
TaniumConnect5.29 to before 5.29.272; 5.37 to before 5.37.177; 5.47 to before 5.47.1355.29.272, 5.37.177, 5.47.135Patch availableCNA
TaniumIntegrity Monitor3.6 to before 3.6.608; 3.7 to before 3.7.383; 3.8 to before 3.8.3623.6.608, 3.7.383, 3.8.362Patch availableCNA
TaniumHealth Check1.13 to before 1.13.6531.13.653Patch availableCNA
TaniumEndpoint Configuration Toolset Solution1.51 to before 1.51.61; 1.59 to before 1.59.51; 1.71 to before 1.71.261.51.61, 1.59.51, 1.71.26Patch availableCNA
TaniumPatch3.24 to before 3.24.328; 3.28 to before 3.28.346; 3.32 to before 3.32.3833.24.328, 3.28.346, 3.32.383Patch availableCNA
TaniumPerformance1.25 to before 1.25.1961.25.196Patch availableCNA
TaniumReputation6.6 to before 6.6.150; 6.7 to before 6.7.143; 6.8 to before 6.8.1676.6.150, 6.7.143, 6.8.167Patch availableCNA
TaniumReveal2.4 to before 2.4.109; 2.5 to before 2.5.1662.4.109, 2.5.166Patch availableCNA
TaniumThreat Response4.9 to before 4.9.480; 4.12 to before 4.12.353; 4.17 to before 4.17.3334.9.480, 4.12.353, 4.17.333Patch availableCNA
TaniumProvision Host10.4.100 to before 10.4.100; 10.8.115 to before 10.8.115; 10.9.113 to before 10.9.113; 10.10.189 to before 10.10.189; 10.11.127 to before 10.11.12710.4.100, 10.8.115, 10.9.113, 10.10.189, 10.11.127Patch availableCNA
  • TanOS VendorTanium Affected 1.8.5 to before 1.8.5.0326; 1.8.6 to before 1.8.6.0193; 1.9.0 to before 1.9.0.0089 Fixed in 1.8.5.0326, 1.8.6.0193, 1.9.0.0089 Patch available CNA
  • Asset VendorTanium Affected 1.33 to before 1.33.334; 1.36 to before 1.36.182; 1.39 to before 1.39.164 Fixed in 1.33.334, 1.36.182, 1.39.164 Patch available CNA
  • Comply VendorTanium Affected 2.32 to before 2.32.275; 2.35 to before 2.35.337; 2.37 to before 2.37.347 Fixed in 2.32.275, 2.35.337, 2.37.347 Patch available CNA
  • Connect VendorTanium Affected 5.29 to before 5.29.272; 5.37 to before 5.37.177; 5.47 to before 5.47.135 Fixed in 5.29.272, 5.37.177, 5.47.135 Patch available CNA
  • Integrity Monitor VendorTanium Affected 3.6 to before 3.6.608; 3.7 to before 3.7.383; 3.8 to before 3.8.362 Fixed in 3.6.608, 3.7.383, 3.8.362 Patch available CNA
  • Health Check VendorTanium Affected 1.13 to before 1.13.653 Fixed in 1.13.653 Patch available CNA
  • Endpoint Configuration Toolset Solution VendorTanium Affected 1.51 to before 1.51.61; 1.59 to before 1.59.51; 1.71 to before 1.71.26 Fixed in 1.51.61, 1.59.51, 1.71.26 Patch available CNA
  • Patch VendorTanium Affected 3.24 to before 3.24.328; 3.28 to before 3.28.346; 3.32 to before 3.32.383 Fixed in 3.24.328, 3.28.346, 3.32.383 Patch available CNA
  • Performance VendorTanium Affected 1.25 to before 1.25.196 Fixed in 1.25.196 Patch available CNA
  • Reputation VendorTanium Affected 6.6 to before 6.6.150; 6.7 to before 6.7.143; 6.8 to before 6.8.167 Fixed in 6.6.150, 6.7.143, 6.8.167 Patch available CNA
  • Reveal VendorTanium Affected 2.4 to before 2.4.109; 2.5 to before 2.5.166 Fixed in 2.4.109, 2.5.166 Patch available CNA
  • Threat Response VendorTanium Affected 4.9 to before 4.9.480; 4.12 to before 4.12.353; 4.17 to before 4.17.333 Fixed in 4.9.480, 4.12.353, 4.17.333 Patch available CNA
  • Provision Host VendorTanium Affected 10.4.100 to before 10.4.100; 10.8.115 to before 10.8.115; 10.9.113 to before 10.9.113; 10.10.189 to before 10.10.189; 10.11.127 to before 10.11.127 Fixed in 10.4.100, 10.8.115, 10.9.113, 10.10.189, 10.11.127 Patch available CNA

CPE names Threatist (inferred) · 3

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:*——Tanium
cpe:2.3:a:tanium:connect:*:*:*:*:*:*:*:*——Tanium
cpe:2.3:a:tanium:threat_response:*:*:*:*:*:*:*:*——Tanium
  • cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:* Versions — — ·Tanium
  • cpe:2.3:a:tanium:connect:*:*:*:*:*:*:*:* Versions — — ·Tanium
  • cpe:2.3:a:tanium:threat_response:*:*:*:*:*:*:*:* Versions — — ·Tanium

Remediation

Upgrade TanOS to 1.8.5.0326, 1.8.6.0193 or 1.9.0.0089, Asset to 1.33.334, 1.36.182 or 1.39.164, Comply to 2.32.275, 2.35.337 or 2.37.347, Connect to 5.29.272, 5.37.177 or 5.47.135, and Integrity Monitor to 3.6.608, 3.7.383 or 3.8.362. Tanium also lists fixed versions for the other affected products.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

  • Fix · CNA TanOS (Tanium) Fixed in 1.8.5.0326, 1.8.6.0193, 1.9.0.0089
  • Fix · CNA Asset (Tanium) Fixed in 1.33.334, 1.36.182, 1.39.164
  • Fix · CNA Comply (Tanium) Fixed in 2.32.275, 2.35.337, 2.37.347
  • Fix · CNA Connect (Tanium) Fixed in 5.29.272, 5.37.177, 5.47.135
  • Fix · CNA Integrity Monitor (Tanium) Fixed in 3.6.608, 3.7.383, 3.8.362
  • Fix · CNA Health Check (Tanium) Fixed in 1.13.653
  • Fix · CNA Endpoint Configuration Toolset Solution (Tanium) Fixed in 1.51.61, 1.59.51, 1.71.26
  • Fix · CNA Patch (Tanium) Fixed in 3.24.328, 3.28.346, 3.32.383
  • Fix · CNA Performance (Tanium) Fixed in 1.25.196
  • Fix · CNA Reputation (Tanium) Fixed in 6.6.150, 6.7.143, 6.8.167
  • Fix · CNA Reveal (Tanium) Fixed in 2.4.109, 2.5.166
  • Fix · CNA Threat Response (Tanium) Fixed in 4.9.480, 4.12.353, 4.17.333
  • Fix · CNA Provision Host (Tanium) Fixed in 10.4.100, 10.8.115, 10.9.113, 10.10.189, 10.11.127

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Tanium Threat Response 4.12.353, 4.17.333, 4.9.480

    7 records Highest priority Priority LOW 7 LOW

    Other records, highest priority first

    • TI-2026-84819 Unauthorized code execution in Tanium Threat ResponsePriority LOW 35
    • TI-2026-84818 Tanium Threat Response unauthorized code execution vulnerabilityPriority LOW 35
    • TI-2026-84822 Tanium Threat Response improper input validation flawPriority LOW 28
    Show all 7 records →

Timeline

  1. 2026-11-03 Threatist record created from CVE-2026-121565
  2. 2026-11-04 Alias added: GHSA-ww98-p29q-34hf
  3. 2026-11-04 Affected versions changed · CNA
  4. 2026-11-05 Priority changed: MEDIUM → LOW
  5. 2026-11-06 CISA SSVC decision points changed

References

Other 1

  • TI-2026-81473 Unauthorized code execution in Tanium Threat Response CVSS 3.1HIGH 8.8
  • TI-2026-81459 Tanium Certificate Manager unauthorized code execution vulnerability CVSS 3.1HIGH 8.8
  • TI-2026-59476 Tanium addressed a SQL injection vulnerability in Threat Response. CVSS 3.1HIGH 8.8
  • TI-2026-08094 Tanium addressed an unauthorized code execution vulnerability in Connect. CVSS 3.1HIGH 8.8
  • TI-2026-08093 Tanium addressed an unauthorized code execution vulnerability in Connect. CVSS 3.1HIGH 8.8
  • TI-2025-13983 Tanium addressed an improper input validation vulnerability in Deploy. CVSS 3.1HIGH 8.8
See all 135 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences