How do I check whether I am affected by CVE-2026-108313?

- Compare the installed Tanium Server version against the fixed version in Tanium's advisory (unknown in these sources) - Check the Tanium Server version in the Tanium console or on the server host (unknown in these sources)

What is the fix for CVE-2026-108313?

- Update Tanium Server to the version Tanium lists as fixed (unknown in these sources) - Check the Tanium security advisory for the exact patched build (unknown in these sources)

Who is not affected by CVE-2026-108313?

Not affected if: not-running-tanium.

Live › vulnerability › CVE-2026-108313

Go to dashboard

medium6.6Vendor

Tanium Server: incorrect privilege assignment lets low-privilege users gain rights

Tanium Server had an incorrect privilege assignment flaw, which the vendor has addressed. The sources do not say which privileges an attacker gains or what preconditions apply.

Summary written from the sources below. Check the originals before acting.

CVSS 3.x

6.6

medium

scored by 3938794e-25f5-4123-a1ba-5cbd7f104512

known so far3 of 6

missing: versions, primary source, exploitation

First public: Oct 27, 2026 UTC
Last modified: Oct 27, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-27 18:32 UTC. All times on this page are UTC.

Why it is medium, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: Not known from the sources.
Needs a special setup: Not known from the sources.
Reachable from: Not known from the sources.
Worst case: Unknown privilege gain on the Tanium Server.
CVSS said: 6.6. The facts above say low; we keep the sources' medium until an analyst looks.

Who is affected

Organizations running Tanium Server on a version before the vendor's fix. The sources do not say which versions are affected or which roles can exploit the flaw. Teams with no Tanium Server deployment can skip it.

Know the next one before it finds you.

Add to Slack

Live › vulnerability › CVE-2026-108313

Go to dashboard

medium6.6Vendor

Tanium Server: incorrect privilege assignment lets low-privilege users gain rights

Tanium Server had an incorrect privilege assignment flaw, which the vendor has addressed. The sources do not say which privileges an attacker gains or what preconditions apply.

Summary written from the sources below. Check the originals before acting.

CVSS 3.x

6.6

medium

scored by 3938794e-25f5-4123-a1ba-5cbd7f104512

known so far3 of 6

missing: versions, primary source, exploitation

First public: Oct 27, 2026 UTC
Last modified: Oct 27, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-27 18:32 UTC. All times on this page are UTC.

Why it is medium, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: Not known from the sources.
Needs a special setup: Not known from the sources.
Reachable from: Not known from the sources.
Worst case: Unknown privilege gain on the Tanium Server.
CVSS said: 6.6. The facts above say low; we keep the sources' medium until an analyst looks.

Who is affected

Know the next one before it finds you.

Add to Slack

Tanium Server: incorrect privilege assignment lets low-privilege users gain rights

Why it is medium, and not just CVSS

Who is affected

Know the next one before it finds you.

Tanium Server: incorrect privilege assignment lets low-privilege users gain rights

Why it is medium, and not just CVSS

Who is affected

Know the next one before it finds you.

How to check

The fix

Who had it, and when

What the sources say, verbatim

Sources