---
id: "CVE-2026-116665"
kind: "vulnerability"
aliases: ["CVE-2026-116665"]
title: "Tanium Discover: information disclosure flaw exposes data to unauthorized users"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["discover", "tanium", "vendor"]
not_affected_if: []
published_at: "2026-11-03T23:17:31+00:00"
first_seen_at: "2026-11-03T23:45:13+00:00"
updated_at: "2026-11-03T23:45:53+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116665", "first_seen_at": "2026-11-03T23:45:13+00:00"}]
---

# Tanium Discover: information disclosure flaw exposes data to unauthorized users

Tanium Discover, an asset discovery product, has an information disclosure flaw. The sources do not say what data leaks or who can reach it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-03T23:45:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116665

## From the sources

Tanium addressed an information disclosure vulnerability in Discover.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_