# CVE-2026-87073: Tanium Comply improper access control

Source: https://junglewise.ai/threats/cve-2026-87073-tanium-comply-improper-access-control  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-09. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-87073 · Severity: medium · CVSS 6.5 · Published 2026-09-09

Tanium Comply is a compliance and assessment tool used to evaluate system security configurations. A flaw in access controls allows privileged users on systems running the Tanium Client to forge or alter compliance assessment results, potentially masking security issues and undermining the integrity of compliance reports.

Technologies: [Tanium Comply](https://junglewise.ai/threats/technologies/comply). Vendors: [Tanium](https://junglewise.ai/threats/vendors/tanium).

## Quick answers

**Is CVE-2026-87073 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-87073 being exploited in the wild.

**How severe is CVE-2026-87073?** Medium severity, with a CVSS score of 6.5, published 9 September 2026.

**Which products and versions are affected?** Tanium Comply 2.32 to 2.32.252, 2.35 to 2.35.306, 2.37 to 2.37.308.

**Is there a fix for CVE-2026-87073?** A patch was published on 2026-09-09: Updates available for all affected release lines Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-87073 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-87073?** Check whether you run Tanium Comply at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is an improper access control flaw in Tanium Comply affecting versions 2.32–2.37 across multiple release lines. An attacker with privileged local access to a system running the Tanium Client can create or modify Comply assessment scan results without proper authorization checks. The network attack vector (AV:N) combined with low attack complexity (AC:L) indicates the flaw may be reachable over the network with valid credentials (PR:L). The impact is high integrity (I:H), meaning attackers can tamper with assessment data. Patches are available for all affected release lines: v2.32.252, v2.35.306, and v2.37.308 or later.

## Affected products

- Tanium Comply 2.32 to 2.32.252, 2.35 to 2.35.306, 2.37 to 2.37.308

## Timeline

- 2026-09-09: disclosed
- 2026-09-09: patched: Updates available for all affected release lines

## References

- [https://security.tanium.com/TAN-2026-029](https://security.tanium.com/TAN-2026-029)

## Related threats

- [Tanium multiple products improper certificate validation](https://junglewise.ai/threats/cve-2026-121565-tanium-addressed-an-improper-certificate-validation)
- [Tanium Comply improper output sanitization in CSV export](https://junglewise.ai/threats/cve-2026-116647-tanium-addressed-an-improper-output-sanitization-vulnerability)
- [Tanium Comply improper access control](https://junglewise.ai/threats/cve-2026-108302-tanium-addressed-an-improper-access-controls-vulnerability-in)
- [Tanium Comply improper access controls vulnerability](https://junglewise.ai/threats/cve-2026-108301-tanium-addressed-an-improper-access-controls-vulnerability-in)
- [Tanium Comply improper access control in vulnerability sources](https://junglewise.ai/threats/cve-2026-87075-tanium-comply-improper-access-control-in-vulnerability-sources)