---
id: "CVE-2026-108330"
kind: "vulnerability"
aliases: ["CVE-2026-108330"]
title: "Tanium Threat Response client extension leaks information to local users"
severity: "low"
cvss: 3.6
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["endpoint-management", "other", "tanium"]
not_affected_if: []
published_at: "2026-10-27T18:17:33+00:00"
first_seen_at: "2026-10-27T18:32:59+00:00"
updated_at: "2026-10-27T18:35:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108330", "first_seen_at": "2026-10-27T18:32:59+00:00"}]
---

# Tanium Threat Response client extension leaks information to local users

Tanium fixed an information disclosure flaw in the Threat Response Client Extension. The sources do not say what data leaks or how, so the exposed information is unknown.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- Update the Tanium Threat Response Client Extension to the version Tanium lists as fixed (the version is not in the sources).

## Timeline

- 2026-10-27T18:32:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-108330

## From the sources

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_