# CVE-2026-108307: Tanium Index heap buffer overflow

Source: https://junglewise.ai/threats/cve-2026-108307-tanium-addressed-a-heap-based-buffer-overflow-vulnerability-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-27. Updated: 2026-10-27  
License: CC BY 4.0 with a link back

CVE-2026-108307 · Severity: high · CVSS 7.8 · Published 2026-10-27

Tanium Index is a configuration management tool used to deploy and manage endpoint security across enterprise networks. A heap buffer overflow vulnerability in Index could allow an attacker with local access to a system running Tanium Client to execute arbitrary code with the same privileges as the client, potentially compromising endpoint security controls and sensitive data.

Technologies: [Tanium Endpoint Configuration Toolset Solution](https://junglewise.ai/threats/technologies/endpoint-configuration-toolset-solution). Vendors: [Tanium](https://junglewise.ai/threats/vendors/tanium).

## Quick answers

**Is CVE-2026-108307 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-108307 being exploited in the wild.

**How severe is CVE-2026-108307?** High severity, with a CVSS score of 7.8, published 27 October 2026.

**Which products and versions are affected?** Tanium Endpoint Configuration Toolset Solution 2025H1: v1.51 to v1.51.60; 2025H2: v1.59 to v1.59.50; 2026H1: v1.71 to v1.71.25; Tanium Index-Cx 3.9 before 3.9.520; 3.11 before 3.11.443; 3.14 before 3.14.921; 3.15 before 3.15.2420; 3.16 before 3.16.984.

**Is there a fix for CVE-2026-108307?** Yes: fixed in Endpoint Configuration Toolset Solution 2025H1 Update 26 (v1.51.60) and later; 2025H2 Update 16 (v1.59.50) and later; 2026H1 Update 9 (v1.71.25) and later. index-cx 3.9.520, 3.11.443, 3.14.921, 3.15.2420, 3.16.984 and later.. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-108307 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-108307?** Check whether you run Tanium Endpoint Configuration Toolset Solution or Tanium Index-Cx at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Endpoint Configuration Toolset Solution 2025H1 Update 26 (v1.51.60) and later; 2025H2 Update 16 (v1.59.50) and later; 2026H1 Update 9 (v1.71.25) and later. index-cx 3.9.520, 3.11.443, 3.14.921, 3.15.2420, 3.16.984 and later.

## Technical details

A heap-based buffer overflow exists in Tanium Index that permits arbitrary code execution when an attacker with local access (PR:L) interacts with a vulnerable version. The attack requires local access to a system running Tanium Client and can result in unauthorized code execution in the client's security context. Patches are available across multiple product releases.

## Affected products

- Tanium Endpoint Configuration Toolset Solution 2025H1: v1.51 to v1.51.60; 2025H2: v1.59 to v1.59.50; 2026H1: v1.71 to v1.71.25
- Tanium index-cx 3.9 before 3.9.520; 3.11 before 3.11.443; 3.14 before 3.14.921; 3.15 before 3.15.2420; 3.16 before 3.16.984

## Timeline

- 2026-10-27: advisory: Tanium security bulletin TAN-2026-057 published

## References

- [https://security.tanium.com/TAN-2026-057](https://security.tanium.com/TAN-2026-057)

## Related threats

- [Tanium multiple products improper certificate validation](https://junglewise.ai/threats/cve-2026-121565-tanium-addressed-an-improper-certificate-validation)
- [Tanium Threat Response symlink resolution privilege escalation](https://junglewise.ai/threats/cve-2026-108332-tanium-addressed-an-improper-link-resolution-before-file-access)
- [Tanium Stream Client Extension improper certificate validation](https://junglewise.ai/threats/cve-2026-108326-tanium-addressed-an-improper-certificate-validation)
- [Tanium Endpoint Configuration Performance Client Extension denial of service](https://junglewise.ai/threats/cve-2026-108309-tanium-addressed-an-uncontrolled-resource-consumption)
- [Tanium End-User Notifications local privilege escalation](https://junglewise.ai/threats/cve-2026-108306-tanium-addressed-a-local-privilege-escalation-vulnerability-in)