🔐 Two Tanium report-writing permissions can become code execution in the Comply service. Three release branches need checking. Tanium published two separate High-severity advisories: 🔹 CVE-2026-87021 starts with an authenticated user holding both named Comply report-writing permissions. 🔹 CVE-2026-87034 starts with privileged access to a system running the Tanium Client and can lead to SQL-query tampering. These are separate access paths. Tanium does not describe them as one chained exploit. The fixed Comply versions are branch-specific: ✅ 2025H1: 2.32.252 or later ✅ 2025H2: 2.35.306 or later ✅ 2026H1: 2.37.308 or later A change record saying “Tanium updated” is too vague. It should identify the release branch, complete Comply version and evidence that the intended module is running. 🔗 https://www.pk-sharma.com/briefing/tanium-comply-two-permissions-three-branches #Tanium #VulnerabilityManagement #CVE #AccessControl #EndpointSecurity #PatchManagement #CyberSecurity
Post summary
Tanium released update advisories for two high‑severity CVEs in its Comply service, detailing exploitable permission paths and providing specific patched versions for each branch.