All vulnerabilities
CVE-2026-108328

Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.

Tanium Threat Response
Open in ThreatlineRecord JSON
CVSS
4.2Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in4.9.476Also 4.12.349, 4.17.327CVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Affected versions 3

  • Threat Responseaffected: 4.9 before 4.9.476CVE List
  • Threat Responseaffected: 4.12 before 4.12.349CVE List
  • Threat Responseaffected: 4.17 before 4.17.327CVE List

References 1