Tanium Discover Incorrect Default Permissions Vulnerability Allowing Unauthorized Access to Platform Content

A vulnerability allowing incorrect default permissions has been identified in Tanium Discover, prior to Update 5 in the 2025H1 Release. This issue could enable an authenticated Tanium user with specific service account permissions to read or write all platform content.

Impact

Exploitation of this vulnerability could allow an authenticated user with certain permissions to read or write all platform content, potentially leading to unauthorized access or modification of sensitive information.

Remediation

Users can update to Tanium Discover version 4.10.118 or later to address this vulnerability.