Live › vulnerability › CVE-2026-116647
Go to dashboardTanium Comply does not neutralize formula elements in CSV files it exports (CWE-1236). An attacker with access to a system running the Tanium Client can inject arbitrary data, including spreadsheet formulas, into Comply CSV exports. CVSS 7.1 (network, no privileges, user interaction required). No exploitation or public PoC found.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 18:32 UTC. All times on this page are UTC.
Teams that run Tanium Comply (on-prem or cloud) and export compliance or vulnerability reports to CSV. An attacker who controls an endpoint running the Tanium Client can plant data that becomes live formulas when someone opens the export in a spreadsheet. If nobody exports Comply data to CSV, exposure is low.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Tanium Comply | vendor | >= 2.32, < 2.32.263; >= 2.35, < 2.35.323; >= 2.37, < 2.37.326 | 2.32.263, 2.35.323, 2.37.326 |
2.32.263 (2025H1), 2.35.323 (2025H2) or 2.37.326 (2026H1)2.32.263 (2025H1 Update 26), 2.35.323 (2025H2 Update 16) or 2.37.326 (2026H1 Update 9), or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Tanium addressed an improper output sanitization vulnerability in Comply.
This page as .md · .json · in your agent: get_signal("CVE-2026-116647")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.