CVE-2025-15310CWE-59

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.

High · published February 9, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

🚨 A local privilege escalation vulnerability in Tanium's Patch Endpoint Tools is like handing out VIP passes without checking IDs! ⚡ It's akin to a hotel where anyone can sneak into the penthouse just by using the service elevator — no one is checking who they are. This flaw could let attackers gain higher-level access without proper authorization, turning them into the ultimate gatecrashers. If exploited, an attacker could gain elevated privileges, allowing them to modify system settings, access sensitive data, or even take control of the entire system. This could lead to severe disruption and data loss, transforming a simple intrusion into a nightmare scenario for your operations.

Put simply

It's akin to a hotel where anyone can sneak into the penthouse just by using the service elevator — no one is checking who they are. This flaw could let attackers gain higher-level access without proper authorization, turning them into the ultimate gatecrashers. This vulnerability allows a local attacker to escalate their privileges within the system due to improper access controls in the Patch Endpoint Tools component, potentially leading to unauthorized actions.

What to do

If exploited, an attacker could gain elevated privileges, allowing them to modify system settings, access sensitive data, or even take control of the entire system. This could lead to severe disruption and data loss, transforming a simple intrusion into a nightmare scenario for your operations. To safeguard your systems, update Tanium to the latest version immediately to address this issue. Ensure all users are aware of proper access protocols to minimize risks. Regularly review your security policies to reinforce good practices. You've got this! With the right steps, you can fortify your defenses and keep those digital gatecrashers at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-02-09T23:00Z
EPSS history
Timeline
  • 09 FEB 23:00Z
    Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
    cvelistv5