Tanium addressed an unauthorized code execution vulnerability in Connect.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Tanium
  • Connect

No data.

No data.

References
Link Providers
https://security.tanium.com/TAN-2026-014 cve-icon cve-icon
History

Wed, 27 May 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 27 May 2026 15:15:00 +0000

Type Values Removed Values Added
Title Command Injection in Connect Allows Privilege Escalation on Windows Tanium Module Server Tanium addressed an unauthorized code execution vulnerability in Connect.

Wed, 27 May 2026 03:45:00 +0000

Type Values Removed Values Added
First Time appeared Tanium
Tanium connect
Vendors & Products Tanium
Tanium connect

Wed, 27 May 2026 02:15:00 +0000

Type Values Removed Values Added
Description Tanium addressed an unauthorized code execution vulnerability in Connect.
Title Command Injection in Connect Allows Privilege Escalation on Windows Tanium Module Server
Weaknesses CWE-78
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Tanium

Published: 2026-05-27T01:19:26.555Z

Updated: 2026-05-27T14:07:47.038Z

Reserved: 2026-05-21T16:46:15.651Z

Link: CVE-2026-9207

cve-icon Vulnrichment

Updated: 2026-05-27T13:51:07.271Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-27T02:16:35.130

Modified: 2026-05-27T14:54:20.160

Link: CVE-2026-9207

cve-icon Redhat

No data.