---
id: "CVE-2026-108325"
kind: "vulnerability"
aliases: ["CVE-2026-108325"]
title: "Tanium Reputation: sensitive data written into log files"
severity: "medium"
cvss: 6.6
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["reputation", "tanium", "vendor"]
not_affected_if: []
published_at: "2026-10-27T18:17:33+00:00"
first_seen_at: "2026-10-27T18:32:59+00:00"
updated_at: "2026-10-27T18:34:42+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108325", "first_seen_at": "2026-10-27T18:32:59+00:00"}]
---

# Tanium Reputation: sensitive data written into log files

Tanium's Reputation component writes sensitive information into log files, according to the NVD entry. An attacker who can read those logs could obtain that data, but the sources do not name the exact data or the affected versions.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- Check the Tanium security advisory for the fixed Reputation version and upgrade to it
- Restrict read access to Tanium log files until the fix is applied

## Timeline

- 2026-10-27T18:32:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-108325

## From the sources

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_