Search criteria

12 vulnerabilities found for TanOS by Tanium

CVE-2026-2605 (GCVE-0-2026-2605)

Vulnerability from nvd – Published: 2026-02-19 23:10 – Updated: 2026-03-02 15:51
VLAI
Title
Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
Summary
Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
Severity
5.3 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
  • CWE-532 - Insertion of Sensitive Information into Log File
Assigner
References
Impacted products
Vendor Product Version
Tanium TanOS Affected: 1.8.4 , < 1.8.4.0249 (custom)
Affected: 1.8.5 , < 1.8.5.0282 (custom)
Affected: 1.8.6 , < 1.8.6.0150 (custom)
    cpe:2.3:a:tanium:tanos:1.8.4.0249:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0282:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.6.0150:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2026-02-19 23:09
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2605",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:51:21.997907Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:51:41.710Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.4.0249:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0282:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.6.0150:*:*:*:*:*:*:*"
          ],
          "product": "TanOS",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.4.0249",
              "status": "affected",
              "version": "1.8.4",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0282",
              "status": "affected",
              "version": "1.8.5",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.6.0150",
              "status": "affected",
              "version": "1.8.6",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-02-16T21:37:14.785Z",
      "datePublic": "2026-02-19T23:09:49.159Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:13:38.465Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-006",
          "url": "https://security.tanium.com/TAN-2026-006"
        }
      ],
      "title": "Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-2605",
    "datePublished": "2026-02-19T23:10:02.867Z",
    "dateReserved": "2026-02-16T21:37:15.555Z",
    "dateUpdated": "2026-03-02T15:51:41.710Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-15311 (GCVE-0-2025-15311)

Vulnerability from nvd – Published: 2026-02-05 18:26 – Updated: 2026-02-06 19:01
VLAI
Title
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.
Summary
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-150 - Improper Neutralization of Escape, Meta, or Control Sequences
Assigner
References
Impacted products
Vendor Product Version
Tanium Tanium Appliance Affected: 1.8.3.0 , < 1.8.3.0146 (custom)
Affected: 1.8.4.0 , < 1.8.4.0149 (custom)
Affected: 1.8.5.0 , < 1.8.5.0212 (custom)
    cpe:2.3:a:tanium:tanos:1.8.3.0145:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.4.0148:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0211:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2025-01-22 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-15311",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-06T19:01:19.848854Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-06T19:01:30.739Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.3.0145:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.4.0148:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0211:*:*:*:*:*:*:*"
          ],
          "product": "Tanium Appliance",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.3.0146",
              "status": "affected",
              "version": "1.8.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.4.0149",
              "status": "affected",
              "version": "1.8.4.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0212",
              "status": "affected",
              "version": "1.8.5.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2025-12-29T23:12:52.865Z",
      "datePublic": "2025-01-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-150",
              "description": "Improper Neutralization of Escape, Meta, or Control Sequences",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-05T18:26:23.251Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2025-002",
          "url": "https://security.tanium.com/TAN-2025-002"
        }
      ],
      "title": "Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2025-15311",
    "datePublished": "2026-02-05T18:26:23.251Z",
    "dateReserved": "2025-12-29T23:12:53.054Z",
    "dateUpdated": "2026-02-06T19:01:30.739Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-15312 (GCVE-0-2025-15312)

Vulnerability from nvd – Published: 2026-02-05 18:26 – Updated: 2026-02-06 19:02
VLAI
Title
Tanium addressed an improper output sanitization vulnerability in TanOS.
Summary
Tanium addressed an improper output sanitization vulnerability in Tanium Appliance.
Severity
6.6 (Medium)
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-116 - Improper Encoding or Escaping of Output
Assigner
References
Impacted products
Vendor Product Version
Tanium Tanium Appliance Affected: 1.8.3.0 , < 1.8.3.0146 (custom)
Affected: 1.8.4.0 , < 1.8.4.0157 (custom)
    cpe:2.3:a:tanium:tanos:1.8.3.0145:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.4.0156:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2025-01-22 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-15312",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-06T19:02:02.740803Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-06T19:02:11.979Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.3.0145:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.4.0156:*:*:*:*:*:*:*"
          ],
          "product": "Tanium Appliance",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.3.0146",
              "status": "affected",
              "version": "1.8.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.4.0157",
              "status": "affected",
              "version": "1.8.4.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2025-12-29T23:12:53.375Z",
      "datePublic": "2025-01-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper output sanitization vulnerability in Tanium Appliance."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-116",
              "description": "Improper Encoding or Escaping of Output",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-05T18:26:06.378Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2025-003",
          "url": "https://security.tanium.com/TAN-2025-003"
        }
      ],
      "title": "Tanium addressed an improper output sanitization vulnerability in TanOS."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2025-15312",
    "datePublished": "2026-02-05T18:26:06.378Z",
    "dateReserved": "2025-12-29T23:12:53.559Z",
    "dateUpdated": "2026-02-06T19:02:11.979Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-15321 (GCVE-0-2025-15321)

Vulnerability from nvd – Published: 2026-02-05 18:20 – Updated: 2026-02-06 17:37
VLAI
Title
Tanium addressed an improper input validation vulnerability in Tanium Appliance.
Summary
Tanium addressed an improper input validation vulnerability in Tanium Appliance.
Severity
2.7 (Low)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
Impacted products
Vendor Product Version
Tanium Tanium Appliance Affected: 1.8.3.0 , < 1.8.3.0196 (custom)
Affected: 1.8.5.0 , < 1.8.5.0199 (custom)
Affected: 1.8.5.0 , < 1.8.5.0227 (custom)
    cpe:2.3:a:tanium:tanos:1.8.3.0195:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0198:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0226:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2025-08-19 00:00
Credits
Filip Waeytens Frank Lycops Jean-Michel Huguet Jorge Escabias Justin Hocquel from NCIA/NCSC
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-15321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-06T17:37:17.139008Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-06T17:37:27.718Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.3.0195:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0198:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0226:*:*:*:*:*:*:*"
          ],
          "product": "Tanium Appliance",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.3.0196",
              "status": "affected",
              "version": "1.8.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0199",
              "status": "affected",
              "version": "1.8.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0227",
              "status": "affected",
              "version": "1.8.5.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Filip Waeytens"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Frank Lycops"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Jean-Michel Huguet"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Jorge Escabias"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Justin Hocquel from NCIA/NCSC"
        }
      ],
      "dateAssigned": "2025-12-29T23:13:00.595Z",
      "datePublic": "2025-08-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper input validation vulnerability in Tanium Appliance."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-05T18:20:39.404Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2025-024",
          "url": "https://security.tanium.com/TAN-2025-024"
        }
      ],
      "title": "Tanium addressed an improper input validation vulnerability in Tanium Appliance."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2025-15321",
    "datePublished": "2026-02-05T18:20:39.404Z",
    "dateReserved": "2025-12-29T23:13:00.749Z",
    "dateUpdated": "2026-02-06T17:37:27.718Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-15323 (GCVE-0-2025-15323)

Vulnerability from nvd – Published: 2026-02-05 18:12 – Updated: 2026-02-06 19:20
VLAI
Title
Tanium addressed an improper certificate validation vulnerability in Tanium Appliance.
Summary
Tanium addressed an improper certificate validation vulnerability in Tanium Appliance.
Severity
3.7 (Low)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
  • CWE-295 - Improper Certificate Validation
Assigner
References
Impacted products
Vendor Product Version
Tanium Tanium Appliance Affected: 1.8.3.0 , < 1.8.3.0199 (custom)
Affected: 1.8.4.0 , < 1.8.4.0205 (custom)
Affected: 1.8.5.0 , < 1.8.5.0236 (custom)
    cpe:2.3:a:tanium:tanos:1.8.3.0198:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.4.0204:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0235:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2025-10-02 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-15323",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-06T19:20:26.658499Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-06T19:20:34.565Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.3.0198:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.4.0204:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0235:*:*:*:*:*:*:*"
          ],
          "product": "Tanium Appliance",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.3.0199",
              "status": "affected",
              "version": "1.8.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.4.0205",
              "status": "affected",
              "version": "1.8.4.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0236",
              "status": "affected",
              "version": "1.8.5.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2025-12-29T23:13:02.561Z",
      "datePublic": "2025-10-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper certificate validation vulnerability in Tanium Appliance."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-05T18:12:21.517Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2025-031",
          "url": "https://security.tanium.com/TAN-2025-031"
        }
      ],
      "title": "Tanium addressed an improper certificate validation vulnerability in Tanium Appliance."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2025-15323",
    "datePublished": "2026-02-05T18:12:21.517Z",
    "dateReserved": "2025-12-29T23:13:02.858Z",
    "dateUpdated": "2026-02-06T19:20:34.565Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-13225 (GCVE-0-2025-13225)

Vulnerability from nvd – Published: 2025-11-19 02:44 – Updated: 2026-02-05 18:08
VLAI
Title
Tanium addressed an arbitrary file deletion vulnerability in TanOS.
Summary
Tanium addressed an arbitrary file deletion vulnerability in TanOS.
Severity
5.6 (Medium)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
  • CWE-552 - Files or Directories Accessible to External Parties
Assigner
References
Impacted products
Vendor Product Version
Tanium TanOS Affected: 1.8.4 , < 1.8.4.0229 (custom)
Affected: 1.8.5 , < 1.8.5.0262 (custom)
    cpe:2.3:a:tanium:tanos:1.8.4.0228:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0261:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2025-11-18 23:53
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-13225",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-19T18:48:19.485366Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-552",
                "description": "CWE-552 Files or Directories Accessible to External Parties",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-19T18:48:30.818Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.4.0228:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0261:*:*:*:*:*:*:*"
          ],
          "product": "TanOS",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.4.0229",
              "status": "affected",
              "version": "1.8.4",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0262",
              "status": "affected",
              "version": "1.8.5",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2025-11-14T18:09:22.035Z",
      "datePublic": "2025-11-18T23:53:45.523Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an arbitrary file deletion vulnerability in TanOS."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L",
            "version": "3.1"
          }
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-05T18:08:22.929Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2025-036",
          "url": "https://security.tanium.com/TAN-2025-036"
        }
      ],
      "title": "Tanium addressed an arbitrary file deletion vulnerability in TanOS."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2025-13225",
    "datePublished": "2025-11-19T02:44:55.622Z",
    "dateReserved": "2025-11-15T00:07:09.359Z",
    "dateUpdated": "2026-02-05T18:08:22.929Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-2605 (GCVE-0-2026-2605)

Vulnerability from cvelistv5 – Published: 2026-02-19 23:10 – Updated: 2026-03-02 15:51
VLAI
Title
Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
Summary
Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
Severity
5.3 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
  • CWE-532 - Insertion of Sensitive Information into Log File
Assigner
References
Impacted products
Vendor Product Version
Tanium TanOS Affected: 1.8.4 , < 1.8.4.0249 (custom)
Affected: 1.8.5 , < 1.8.5.0282 (custom)
Affected: 1.8.6 , < 1.8.6.0150 (custom)
    cpe:2.3:a:tanium:tanos:1.8.4.0249:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0282:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.6.0150:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2026-02-19 23:09
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2605",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:51:21.997907Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:51:41.710Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.4.0249:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0282:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.6.0150:*:*:*:*:*:*:*"
          ],
          "product": "TanOS",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.4.0249",
              "status": "affected",
              "version": "1.8.4",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0282",
              "status": "affected",
              "version": "1.8.5",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.6.0150",
              "status": "affected",
              "version": "1.8.6",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-02-16T21:37:14.785Z",
      "datePublic": "2026-02-19T23:09:49.159Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:13:38.465Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-006",
          "url": "https://security.tanium.com/TAN-2026-006"
        }
      ],
      "title": "Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-2605",
    "datePublished": "2026-02-19T23:10:02.867Z",
    "dateReserved": "2026-02-16T21:37:15.555Z",
    "dateUpdated": "2026-03-02T15:51:41.710Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-15311 (GCVE-0-2025-15311)

Vulnerability from cvelistv5 – Published: 2026-02-05 18:26 – Updated: 2026-02-06 19:01
VLAI
Title
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.
Summary
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-150 - Improper Neutralization of Escape, Meta, or Control Sequences
Assigner
References
Impacted products
Vendor Product Version
Tanium Tanium Appliance Affected: 1.8.3.0 , < 1.8.3.0146 (custom)
Affected: 1.8.4.0 , < 1.8.4.0149 (custom)
Affected: 1.8.5.0 , < 1.8.5.0212 (custom)
    cpe:2.3:a:tanium:tanos:1.8.3.0145:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.4.0148:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0211:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2025-01-22 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-15311",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-06T19:01:19.848854Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-06T19:01:30.739Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.3.0145:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.4.0148:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0211:*:*:*:*:*:*:*"
          ],
          "product": "Tanium Appliance",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.3.0146",
              "status": "affected",
              "version": "1.8.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.4.0149",
              "status": "affected",
              "version": "1.8.4.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0212",
              "status": "affected",
              "version": "1.8.5.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2025-12-29T23:12:52.865Z",
      "datePublic": "2025-01-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-150",
              "description": "Improper Neutralization of Escape, Meta, or Control Sequences",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-05T18:26:23.251Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2025-002",
          "url": "https://security.tanium.com/TAN-2025-002"
        }
      ],
      "title": "Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2025-15311",
    "datePublished": "2026-02-05T18:26:23.251Z",
    "dateReserved": "2025-12-29T23:12:53.054Z",
    "dateUpdated": "2026-02-06T19:01:30.739Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-15312 (GCVE-0-2025-15312)

Vulnerability from cvelistv5 – Published: 2026-02-05 18:26 – Updated: 2026-02-06 19:02
VLAI
Title
Tanium addressed an improper output sanitization vulnerability in TanOS.
Summary
Tanium addressed an improper output sanitization vulnerability in Tanium Appliance.
Severity
6.6 (Medium)
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-116 - Improper Encoding or Escaping of Output
Assigner
References
Impacted products
Vendor Product Version
Tanium Tanium Appliance Affected: 1.8.3.0 , < 1.8.3.0146 (custom)
Affected: 1.8.4.0 , < 1.8.4.0157 (custom)
    cpe:2.3:a:tanium:tanos:1.8.3.0145:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.4.0156:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2025-01-22 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-15312",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-06T19:02:02.740803Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-06T19:02:11.979Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.3.0145:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.4.0156:*:*:*:*:*:*:*"
          ],
          "product": "Tanium Appliance",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.3.0146",
              "status": "affected",
              "version": "1.8.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.4.0157",
              "status": "affected",
              "version": "1.8.4.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2025-12-29T23:12:53.375Z",
      "datePublic": "2025-01-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper output sanitization vulnerability in Tanium Appliance."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-116",
              "description": "Improper Encoding or Escaping of Output",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-05T18:26:06.378Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2025-003",
          "url": "https://security.tanium.com/TAN-2025-003"
        }
      ],
      "title": "Tanium addressed an improper output sanitization vulnerability in TanOS."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2025-15312",
    "datePublished": "2026-02-05T18:26:06.378Z",
    "dateReserved": "2025-12-29T23:12:53.559Z",
    "dateUpdated": "2026-02-06T19:02:11.979Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-15321 (GCVE-0-2025-15321)

Vulnerability from cvelistv5 – Published: 2026-02-05 18:20 – Updated: 2026-02-06 17:37
VLAI
Title
Tanium addressed an improper input validation vulnerability in Tanium Appliance.
Summary
Tanium addressed an improper input validation vulnerability in Tanium Appliance.
Severity
2.7 (Low)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
Impacted products
Vendor Product Version
Tanium Tanium Appliance Affected: 1.8.3.0 , < 1.8.3.0196 (custom)
Affected: 1.8.5.0 , < 1.8.5.0199 (custom)
Affected: 1.8.5.0 , < 1.8.5.0227 (custom)
    cpe:2.3:a:tanium:tanos:1.8.3.0195:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0198:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0226:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2025-08-19 00:00
Credits
Filip Waeytens Frank Lycops Jean-Michel Huguet Jorge Escabias Justin Hocquel from NCIA/NCSC
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-15321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-06T17:37:17.139008Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-06T17:37:27.718Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.3.0195:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0198:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0226:*:*:*:*:*:*:*"
          ],
          "product": "Tanium Appliance",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.3.0196",
              "status": "affected",
              "version": "1.8.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0199",
              "status": "affected",
              "version": "1.8.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0227",
              "status": "affected",
              "version": "1.8.5.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Filip Waeytens"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Frank Lycops"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Jean-Michel Huguet"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Jorge Escabias"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Justin Hocquel from NCIA/NCSC"
        }
      ],
      "dateAssigned": "2025-12-29T23:13:00.595Z",
      "datePublic": "2025-08-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper input validation vulnerability in Tanium Appliance."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-05T18:20:39.404Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2025-024",
          "url": "https://security.tanium.com/TAN-2025-024"
        }
      ],
      "title": "Tanium addressed an improper input validation vulnerability in Tanium Appliance."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2025-15321",
    "datePublished": "2026-02-05T18:20:39.404Z",
    "dateReserved": "2025-12-29T23:13:00.749Z",
    "dateUpdated": "2026-02-06T17:37:27.718Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-15323 (GCVE-0-2025-15323)

Vulnerability from cvelistv5 – Published: 2026-02-05 18:12 – Updated: 2026-02-06 19:20
VLAI
Title
Tanium addressed an improper certificate validation vulnerability in Tanium Appliance.
Summary
Tanium addressed an improper certificate validation vulnerability in Tanium Appliance.
Severity
3.7 (Low)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
  • CWE-295 - Improper Certificate Validation
Assigner
References
Impacted products
Vendor Product Version
Tanium Tanium Appliance Affected: 1.8.3.0 , < 1.8.3.0199 (custom)
Affected: 1.8.4.0 , < 1.8.4.0205 (custom)
Affected: 1.8.5.0 , < 1.8.5.0236 (custom)
    cpe:2.3:a:tanium:tanos:1.8.3.0198:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.4.0204:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0235:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2025-10-02 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-15323",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-06T19:20:26.658499Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-06T19:20:34.565Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.3.0198:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.4.0204:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0235:*:*:*:*:*:*:*"
          ],
          "product": "Tanium Appliance",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.3.0199",
              "status": "affected",
              "version": "1.8.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.4.0205",
              "status": "affected",
              "version": "1.8.4.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0236",
              "status": "affected",
              "version": "1.8.5.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2025-12-29T23:13:02.561Z",
      "datePublic": "2025-10-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper certificate validation vulnerability in Tanium Appliance."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-05T18:12:21.517Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2025-031",
          "url": "https://security.tanium.com/TAN-2025-031"
        }
      ],
      "title": "Tanium addressed an improper certificate validation vulnerability in Tanium Appliance."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2025-15323",
    "datePublished": "2026-02-05T18:12:21.517Z",
    "dateReserved": "2025-12-29T23:13:02.858Z",
    "dateUpdated": "2026-02-06T19:20:34.565Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-13225 (GCVE-0-2025-13225)

Vulnerability from cvelistv5 – Published: 2025-11-19 02:44 – Updated: 2026-02-05 18:08
VLAI
Title
Tanium addressed an arbitrary file deletion vulnerability in TanOS.
Summary
Tanium addressed an arbitrary file deletion vulnerability in TanOS.
Severity
5.6 (Medium)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
  • CWE-552 - Files or Directories Accessible to External Parties
Assigner
References
Impacted products
Vendor Product Version
Tanium TanOS Affected: 1.8.4 , < 1.8.4.0229 (custom)
Affected: 1.8.5 , < 1.8.5.0262 (custom)
    cpe:2.3:a:tanium:tanos:1.8.4.0228:*:*:*:*:*:*:*
    cpe:2.3:a:tanium:tanos:1.8.5.0261:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2025-11-18 23:53
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-13225",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-19T18:48:19.485366Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-552",
                "description": "CWE-552 Files or Directories Accessible to External Parties",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-19T18:48:30.818Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.4.0228:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0261:*:*:*:*:*:*:*"
          ],
          "product": "TanOS",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.4.0229",
              "status": "affected",
              "version": "1.8.4",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0262",
              "status": "affected",
              "version": "1.8.5",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2025-11-14T18:09:22.035Z",
      "datePublic": "2025-11-18T23:53:45.523Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an arbitrary file deletion vulnerability in TanOS."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L",
            "version": "3.1"
          }
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-05T18:08:22.929Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2025-036",
          "url": "https://security.tanium.com/TAN-2025-036"
        }
      ],
      "title": "Tanium addressed an arbitrary file deletion vulnerability in TanOS."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2025-13225",
    "datePublished": "2025-11-19T02:44:55.622Z",
    "dateReserved": "2025-11-15T00:07:09.359Z",
    "dateUpdated": "2026-02-05T18:08:22.929Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}