Tanium Discover Improper Input Validation Vulnerability Allowing SQL Query Manipulation
Vulnerability
An improper input validation vulnerability has been identified in Tanium Discover, prior to version 4.10.90. This vulnerability could enable an authenticated Tanium user with the 'Discover - API Execute' permission to manipulate the SQL query executed by the Discover service.
Impact
Exploitation of this vulnerability could allow for unauthorized modification of SQL queries, potentially leading to SQL injection or other database-related attacks.
Added: Feb 5, 2026, 7:32 PM
Updated: Feb 5, 2026, 8:58 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
5.2remediation
0.0relevance
2.5threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.