All vulnerabilities
CVE-2026-108331

Endpoint Configuration Toolset Solution: Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Tanium Endpoint Configuration Toolset Solution
Open in ThreatlineRecord JSON
CVSS
3.3Low
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in1.71.25Also 1.59.50, 1.51.60 and 5 moreCVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

  • 1.71.25Endpoint Configuration Toolset SolutionCVE List
  • 1.59.50Endpoint Configuration Toolset SolutionCVE List
  • 1.51.60Endpoint Configuration Toolset SolutionCVE List
  • 1.17.802threat-response-cxCVE List
  • 1.18.2732threat-response-cxCVE List
  • 1.19.2213threat-response-cxCVE List
Show all 8 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Text from CVE List

Affected versions 8

  • Endpoint Configuration Toolset Solutionaffected: 1.71.0 before 1.71.25CVE List
  • Endpoint Configuration Toolset Solutionaffected: 1.59.0 before 1.59.50CVE List
  • Endpoint Configuration Toolset Solutionaffected: 1.51.0 before 1.51.60CVE List
  • threat-response-cxaffected: 1.17.802 before 1.17.802CVE List
  • threat-response-cxaffected: 1.18.2732 before 1.18.2732CVE List
  • threat-response-cxaffected: 1.19.2213 before 1.19.2213CVE List
  • threat-response-cxaffected: 1.20.2271 before 1.20.2271CVE List
  • threat-response-cxaffected: 1.21.1673 before 1.21.1673CVE List

References 1