---
id: "CVE-2026-108313"
kind: "vulnerability"
aliases: ["CVE-2026-108313"]
title: "Tanium Server: incorrect privilege assignment lets low-privilege users gain rights"
severity: "medium"
cvss: 6.6
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["self-hosted", "tanium", "vendor", "windows"]
not_affected_if: ["not-running-tanium"]
published_at: "2026-10-27T18:17:32+00:00"
first_seen_at: "2026-10-27T18:32:59+00:00"
updated_at: "2026-10-27T18:34:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108313", "first_seen_at": "2026-10-27T18:32:59+00:00"}]
---

# Tanium Server: incorrect privilege assignment lets low-privilege users gain rights

Tanium Server had an incorrect privilege assignment flaw, which the vendor has addressed. The sources do not say which privileges an attacker gains or what preconditions apply.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Compare the installed Tanium Server version against the fixed version in Tanium's advisory (unknown in these sources)
- Check the Tanium Server version in the Tanium console or on the server host (unknown in these sources)

## Fix

- Update Tanium Server to the version Tanium lists as fixed (unknown in these sources)
- Check the Tanium security advisory for the exact patched build (unknown in these sources)

## Timeline

- 2026-10-27T18:32:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-108313

## From the sources

Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_