CVE-2025-15319CWE-59

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.

High · published February 9, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

⚡ A local privilege escalation vulnerability lurks within Tanium's Patch Endpoint Tools! This could turn the tables in the wrong hands! 🔥 Think of it as a construction worker who finds a spare key to the hard hat storage. With that key, they can not only access the hard hats but also gain entry into restricted areas of the site—potentially causing major chaos! An attacker with local access could elevate their privileges, allowing them to execute arbitrary code and potentially wreak havoc on the system. This could lead to unauthorized access to sensitive data or even complete system control—absolutely devastating!

Put simply

Think of it as a construction worker who finds a spare key to the hard hat storage. With that key, they can not only access the hard hats but also gain entry into restricted areas of the site—potentially causing major chaos! This vulnerability in Tanium's Patch Endpoint Tools allows a local user to escalate their privileges, which could enable them to execute malicious code with higher authority than intended.

What to do

An attacker with local access could elevate their privileges, allowing them to execute arbitrary code and potentially wreak havoc on the system. This could lead to unauthorized access to sensitive data or even complete system control—absolutely devastating! To mitigate this risk, update your Tanium Patch Endpoint Tools to the latest version immediately. Conduct regular audits of user permissions and ensure that only authorized personnel have local access. Don't forget to stay informed about security patches! You’ve got this! Follow these steps and you’ll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-02-09T22:52Z
EPSS history
Timeline
  • 09 FEB 22:52Z
    Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
    cvelistv5