---
id: "CVE-2026-116669"
kind: "vulnerability"
aliases: ["CVE-2026-116669"]
title: "Tanium Discover: improper access controls flaw, details unpublished"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["discover", "tanium", "vendor"]
not_affected_if: []
published_at: "2026-11-03T23:17:32+00:00"
first_seen_at: "2026-11-03T23:45:14+00:00"
updated_at: "2026-11-03T23:45:39+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116669", "first_seen_at": "2026-11-03T23:45:14+00:00"}]
---

# Tanium Discover: improper access controls flaw, details unpublished

Tanium addressed an improper access controls flaw in its Discover product. The sources do not say what an attacker can read or change through it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-03T23:45:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116669

## From the sources

Tanium addressed an improper access controls vulnerability in Discover.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_