TaniumはThreat Responseにおける情報漏洩の脆弱性を修正しました。

The information disclosure vulnerability in Tanium Threat Response allows an attacker to potentially access data that they are not authorized to view. The specific nature of the exposed data is not detailed, but it could include sensitive operational or security information. Successful exploitation could lead to a compromise of confidentiality and potentially aid in further attacks or investigations. While the CVSS score is LOW, the potential impact of unauthorized data access should not be underestimated, particularly in environments where Threat Response is used for critical security monitoring and incident response.

Organizations heavily reliant on Tanium Threat Response for security monitoring and incident response are particularly at risk. Environments with older versions of Threat Response (4.6.0–4.9.379) are directly affected and should prioritize patching to prevent potential data exposure.

• linux / server:

journalctl -u tanium-threat-response | grep -i "information disclosure"

• generic web:

curl -I <threat_response_endpoint> | grep -i "information disclosure"

1. 2026-04-22Disclosure

   disclosure

1. 予約済み2026-04-15
2. 公開日2026-04-22
3. EPSS 更新日2026-04-29

The primary mitigation for CVE-2026-6392 is to upgrade Tanium Threat Response to version 4.9.379 or later. If upgrading immediately is not feasible, consider reviewing Tanium's documentation for any temporary workarounds or configuration changes that might reduce the risk. There are no specific WAF or proxy rules mentioned in the advisory, so focus on patching. After upgrading, confirm the fix by verifying that the information disclosure path is no longer accessible and that Threat Response is functioning as expected.