{"id":"CVE-2026-108328","kind":"vulnerability","aliases":["CVE-2026-108328"],"related":[],"title":"Tanium Threat Response: sensitive data written into log files","description":"Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.","summary":"Tanium Threat Response wrote sensitive information into its log files, according to the vendor-addressed NVD entry. An attacker who can read those logs could obtain that sensitive data.","severity":"medium","cvss":4.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["endpoint-security","tanium","threat-response","vendor"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- Update Tanium Threat Response to the version named in the vendor advisory (version unknown from the sources)","status":"open","published_at":"2026-10-27T18:17:33+00:00","first_seen_at":"2026-10-27T18:32:59+00:00","triaged_at":"2026-10-27T18:35:04+00:00","updated_at":"2026-10-27T18:35:04+00:00","category":"vendor","confidence":0.4,"triage":{"at":"2026-10-27T18:35:04Z","model":"claude-haiku-5-5","output":{"fix":"- Update Tanium Threat Response to the version named in the vendor advisory (version unknown from the sources)","reach":"local","title":"Tanium Threat Response: sensitive data written into log files","impact":"low","summary":"Tanium Threat Response wrote sensitive information into its log files, according to the vendor-addressed NVD entry. An attacker who can read those logs could obtain that sensitive data.","category":"vendor","nicknames":[],"who_cares":["tanium","threat-response","endpoint-security"],"confidence":0.4,"needs_auth":"unknown","worst_case":"Sensitive data readable from log files by attackers with log access","analyst_note":"Find the Tanium advisory for CVE-2026-108328 to get affected versions, the fixed version, and what data is logged.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running Tanium Threat Response. The sources do not say which versions are affected or which data is logged, so the exposure scope is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000524,"input_tokens":3243,"output_tokens":399,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-108328':12A,15A '-2026':11A,14A 'accord':34B 'address':39B,55C 'attack':43B 'could':49B 'cve':10A,13A 'data':5A,53B 'endpoint':17B 'endpoint-secur':16B 'entri':41B 'file':9A,33B,63C 'inform':29B,60C 'insert':57C 'log':8A,32B,48B,62C 'nvd':40B 'obtain':50B 'read':46B 'respons':3A,22B,26B,67C 'secur':18B 'sensit':4A,28B,52B,59C 'tanium':1A,19B,24B,54C 'threat':2A,21B,25B,66C 'threat-respons':20B 'vendor':23B,38B 'vendor-address':37B 'vulner':64C 'written':6A 'wrote':27B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Tanium Threat Response. The sources do not say which versions are affected or which data is logged, so the exposure scope is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T18:17:33+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","cvss_by":"3938794e-25f5-4123-a1ba-5cbd7f104512","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108328","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108328","severity":null,"published_at":"2026-10-27T18:17:33+00:00","modified_at":"2026-10-27T18:17:33+00:00","first_seen_at":"2026-10-27T18:32:59+00:00","fetched_at":"2026-10-27T18:32:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}