Live › vulnerability › CVE-2026-108305
Go to dashboardTanium End-User Notifications (end-user-cx tool) local privilege escalation: a privileged file operation follows a link in a user-controlled location, so a local low-privilege user on a machine running the Tanium Client can gain SYSTEM-level rights. CVSS 7.8. Fixed through Endpoint Configuration Toolset Solution updates plus a Manifest deployment.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 18:32 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| Tanium End-User Notifications (end-user-cx) | vendor | 1.8 < 1.8.47; 1.11 < 1.11.605; 1.19 < 1.19.325; 1.21 < 1.21.835; 1.22 < 1.22.1199; 1.23 < 1.23.766; 1.24 < 1.24.590 | 1.8.47, 1.11.605, 1.19.325, 1.21.835, 1.22.1199, 1.23.766, 1.24.590 |
1.8.47, 1.11 < 1.11.605, 1.19 < 1.19.325, 1.21 < 1.21.835, 1.22 < 1.22.1199, 1.23 < 1.23.766, 1.24 < 1.24.590; or ECT Solution < v1.51.60 (2025H1), < v1.59.50 (2025H2), < v1.71.25 (2026H1)v1.51.60), Update 16 (v1.59.50) or Update 9 (v1.71.25) or later for your release2.13.327 / 2.21.324 / 2.35.252 or later; Tanium Cloud 2.40.197 / 2.42.152 / 2.44.102 / 2.46.75 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
This page as .md · .json · in your agent: get_signal("CVE-2026-108305")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.