CVE-2026-108307: Tanium Index heap buffer overflow

CVE-2026-108307 · Severity: high · CVSS 7.8 · Published 2026-10-27

Tanium Index is a configuration management tool used to deploy and manage endpoint security across enterprise networks. A heap buffer overflow vulnerability in Index could allow an attacker with local access to a system running Tanium Client to execute arbitrary code with the same privileges as the client, potentially compromising endpoint security controls and sensitive data.

Technologies: Tanium Endpoint Configuration Toolset Solution. Vendors: Tanium.

Quick answers

Is CVE-2026-108307 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-108307 being exploited in the wild.
How severe is CVE-2026-108307?
High severity, with a CVSS score of 7.8, published 27 October 2026.
Which products and versions are affected?
Tanium Endpoint Configuration Toolset Solution 2025H1: v1.51 to v1.51.60; 2025H2: v1.59 to v1.59.50; 2026H1: v1.71 to v1.71.25; Tanium Index-Cx 3.9 before 3.9.520; 3.11 before 3.11.443; 3.14 before 3.14.921; 3.15 before 3.15.2420; 3.16 before 3.16.984.
Is there a fix for CVE-2026-108307?
Yes: fixed in Endpoint Configuration Toolset Solution 2025H1 Update 26 (v1.51.60) and later; 2025H2 Update 16 (v1.59.50) and later; 2026H1 Update 9 (v1.71.25) and later. index-cx 3.9.520, 3.11.443, 3.14.921, 3.15.2420, 3.16.984 and later.. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-108307 attacked?
It is attacked with local access, in a software library.
Am I affected by CVE-2026-108307?
Check whether you run Tanium Endpoint Configuration Toolset Solution or Tanium Index-Cx at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • Fixed in: Endpoint Configuration Toolset Solution 2025H1 Update 26 (v1.51.60) and later; 2025H2 Update 16 (v1.59.50) and later; 2026H1 Update 9 (v1.71.25) and later. index-cx 3.9.520, 3.11.443, 3.14.921, 3.15.2420, 3.16.984 and later.

Technical details

A heap-based buffer overflow exists in Tanium Index that permits arbitrary code execution when an attacker with local access (PR:L) interacts with a vulnerable version. The attack requires local access to a system running Tanium Client and can result in unauthorized code execution in the client's security context. Patches are available across multiple product releases.

Affected products

  • Tanium Endpoint Configuration Toolset Solution 2025H1: v1.51 to v1.51.60; 2025H2: v1.59 to v1.59.50; 2026H1: v1.71 to v1.71.25
  • Tanium index-cx 3.9 before 3.9.520; 3.11 before 3.11.443; 3.14 before 3.14.921; 3.15 before 3.15.2420; 3.16 before 3.16.984

Timeline

  • 2026-10-27: advisory: Tanium security bulletin TAN-2026-057 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.