---
id: "CVE-2026-108302"
kind: "vulnerability"
aliases: ["CVE-2026-108302"]
title: "Tanium Comply: improper access controls flaw, details not published"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["comply", "tanium", "vendor"]
not_affected_if: []
published_at: "2026-10-27T18:17:31+00:00"
first_seen_at: "2026-10-27T18:32:58+00:00"
updated_at: "2026-10-27T18:35:02+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108302", "first_seen_at": "2026-10-27T18:32:58+00:00"}]
---

# Tanium Comply: improper access controls flaw, details not published

Tanium fixed an improper access controls flaw in its Comply product. The sources do not say what an attacker can reach or do with it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-27T18:32:58+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-108302

## From the sources

Tanium addressed an improper access controls vulnerability in Comply.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_