Tanium 修复了 Tanium Server 中的信息泄露漏洞。

Successful exploitation of CVE-2026-6408 could allow an attacker to gain unauthorized access to sensitive information managed by the Tanium Server. The specific data exposed depends on the server's configuration and the data it handles, potentially including credentials, configuration details, or operational data. While the CVSS score is LOW, the potential impact on confidentiality could be significant, particularly if the exposed data is highly sensitive or used for critical operations. This vulnerability does not appear to lead to direct remote code execution, but the information gained could be leveraged in subsequent attacks.

Organizations heavily reliant on Tanium Server for endpoint management and security visibility are at increased risk. Environments with misconfigured Tanium Servers or those lacking robust access controls are particularly vulnerable. Any deployment within the affected version range (7.6.4–7.8.2.1168) is potentially at risk.

• linux / server:

journalctl -u tanium-server | grep -i "sensitive data"

• generic web:

curl -I https://<tanium_server_ip>/sensitive_endpoint

• linux / server:

ps aux | grep tanium-server

1. 2026-04-22Disclosure

   disclosure

1. 已保留2026-04-15
2. 发布日期2026-04-22
3. EPSS 更新日期2026-04-29

The primary mitigation for CVE-2026-6408 is to upgrade Tanium Server to version 7.8.2.1168 or later. Before upgrading, review Tanium's release notes for any potential compatibility issues or breaking changes. Consider performing a test upgrade in a non-production environment first. There are no specific WAF or proxy rules that can directly mitigate this information disclosure vulnerability; the upgrade is essential. Monitor Tanium Server logs for any unusual activity or unauthorized access attempts following the upgrade.