CVE Field Guide
About Us
CVE-2026-108327
PUBLISHED
Tanium addressed a path traversal vulnerability in Tanium Data Service.
Assigner:
Tanium
Reserved:
09.10.2026
Published:
03.11.2026
Updated:
03.11.2026
Tanium addressed a path traversal vulnerability in Tanium Data Service.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L
CVSS Score:
5
CVSS score
5
Attack Vector
Network
Scope
Unchanged
Attack Complexity
High
Confidentiality Impact
None
Privileges Required
High
Integrity Impact
High
User Interaction
None
Availability Impact
Low
CVSS 3.1
Product Status
Vendor
Tanium
Product
Tanium Data Service
Versions
affected from 4.1 to 4.1.281 (excl.)
affected from 4.2 to 4.2.360 (excl.)
Vendor
Tanium
Product
Interact
Versions
affected from 3.5.0 to 3.5.141 (excl.)
References
TAN-2026-082
Problem Types
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE