CVE Field Guide
About Us
CVE-2025-15316
PUBLISHED
Tanium addressed a local privilege escalation vulnerability in Tanium Server.
Assigner:
Tanium
Reserved:
29.12.2025
Published:
09.02.2026
Updated:
09.02.2026
Tanium addressed a local privilege escalation vulnerability in Tanium Server.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Score:
6.7
CVSS score
6.7
Attack Vector
Local
Scope
Unchanged
Attack Complexity
Low
Confidentiality Impact
High
Privileges Required
High
Integrity Impact
High
User Interaction
None
Availability Impact
High
CVSS 3.1
Product Status
Vendor
Tanium
Product
Tanium Server
Versions
affected from 7.4.6.0 to 7.4.6.1151 (excl.)
affected from 7.5.6.0 to 7.5.6.1161 (excl.)
affected from 7.6.2.0 to 7.6.2.1293 (excl.)
affected from 7.6.4.0 to 7.6.4.2114 (excl.)
References
TAN-2025-011
Problem Types
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE