---
id: "CVE-2026-116667"
kind: "vulnerability"
aliases: ["CVE-2026-116667"]
title: "Tanium Discover: improper access controls flaw, impact details unpublished"
severity: "medium"
cvss: 4.2
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["self-hosted", "tanium", "tanium-discover", "vendor"]
not_affected_if: []
published_at: "2026-11-03T23:17:32+00:00"
first_seen_at: "2026-11-03T23:45:14+00:00"
updated_at: "2026-11-03T23:45:56+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116667", "first_seen_at": "2026-11-03T23:45:14+00:00"}]
---

# Tanium Discover: improper access controls flaw, impact details unpublished

Tanium has fixed an improper access controls flaw in its Discover product, according to the NVD entry. The sources do not say what an attacker can read or change once the flaw is used.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-03T23:45:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116667

## From the sources

Tanium addressed an improper access controls vulnerability in Discover.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_