---
id: "CVE-2026-108301"
kind: "vulnerability"
aliases: ["CVE-2026-108301"]
title: "Tanium Comply: improper access controls flaw, medium severity, details pending"
severity: "medium"
cvss: 6.0
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["comply", "tanium", "vendor"]
not_affected_if: []
published_at: "2026-10-27T18:17:31+00:00"
first_seen_at: "2026-10-27T18:32:58+00:00"
updated_at: "2026-10-27T18:34:51+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108301", "first_seen_at": "2026-10-27T18:32:58+00:00"}]
---

# Tanium Comply: improper access controls flaw, medium severity, details pending

Tanium fixed an improper access controls flaw in its Comply product. The sources do not say what an attacker can reach or do with it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Fix

- Check the Tanium advisory or NVD entry for the fixed Comply version and apply Tanium's update.

## Timeline

- 2026-10-27T18:32:58+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-108301

## From the sources

Tanium addressed an improper access controls vulnerability in Comply.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_