{"id":"CVE-2026-108325","kind":"vulnerability","aliases":["CVE-2026-108325"],"related":[],"title":"Tanium Reputation: sensitive data written into log files","description":"Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.","summary":"Tanium's Reputation component writes sensitive information into log files, according to the NVD entry. An attacker who can read those logs could obtain that data, but the sources do not name the exact data or the affected versions.","severity":"medium","cvss":6.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["reputation","tanium","vendor"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- Check the Tanium security advisory for the fixed Reputation version and upgrade to it\n- Restrict read access to Tanium log files until the fix is applied","status":"open","published_at":"2026-10-27T18:17:33+00:00","first_seen_at":"2026-10-27T18:32:59+00:00","triaged_at":"2026-10-27T18:34:42+00:00","updated_at":"2026-10-27T18:34:42+00:00","category":"vendor","confidence":0.4,"triage":{"at":"2026-10-27T18:34:42Z","model":"claude-haiku-5-5","output":{"fix":"- Check the Tanium security advisory for the fixed Reputation version and upgrade to it\n- Restrict read access to Tanium log files until the fix is applied","reach":"local","title":"Tanium Reputation: sensitive data written into log files","impact":"low","summary":"Tanium's Reputation component writes sensitive information into log files, according to the NVD entry. An attacker who can read those logs could obtain that data, but the sources do not name the exact data or the affected versions.","category":"vendor","nicknames":[],"who_cares":["tanium","reputation"],"confidence":0.4,"needs_auth":"unknown","worst_case":"sensitive data readable from log files","analyst_note":"Find the Tanium advisory for CVE-2026-108325 to confirm affected Reputation versions, the fixed version, and what data is logged.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000509,"input_tokens":3241,"output_tokens":369,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-108325':11A,14A '-2026':10A,13A 'accord':28B 'address':58C 'affect':55B 'attack':34B 'compon':21B 'could':40B 'cve':9A,12A 'data':4A,43B,52B 'entri':32B 'exact':51B 'file':8A,27B,66C 'inform':24B,63C 'insert':60C 'log':7A,26B,39B,65C 'name':49B 'nvd':31B 'obtain':41B 'read':37B 'reput':2A,15B,20B,69C 'sensit':3A,23B,62C 'sourc':46B 'tanium':1A,16B,18B,57C 'vendor':17B 'version':56B 'vulner':67C 'write':22B 'written':5A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T18:17:33+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"3938794e-25f5-4123-a1ba-5cbd7f104512","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108325","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108325","severity":null,"published_at":"2026-10-27T18:17:33+00:00","modified_at":"2026-10-27T18:17:33+00:00","first_seen_at":"2026-10-27T18:32:59+00:00","fetched_at":"2026-10-27T18:32:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}