CVE-2026-87030 Tanium CVE debrief

Who should care

Defenders responsible for Tanium Comply installations should assess exposure and apply remediation to prevent potential exploitation. This includes verifying the version of Tanium Comply, reviewing and updating inventory to ensure affected versions are identified, and monitoring for potential exploitation attempts. Security teams and vulnerability management teams should prioritize this vulnerability due to its high

Why it matters

Defenders should prioritize verifying exposure in Tanium Comply and applying vendor remediation to prevent potential exploitation.

• Verify exposure in Tanium Comply versions 2.32.0 to 2.32.252, 2.35.0 to 2.35.306, and 2.37.0 to 2.37.308
• Apply vendor remediation to prevent potential exploitation
• Monitor for potential exploitation attempts

Technical summary

A path traversal vulnerability was addressed in Tanium Comply. The vulnerability affects versions 2.32.0 to 2.32.252, 2.35.0 to 2.35.306, and 2.37.0 to 2.37.308. This vulnerability allows attackers to access files outside the intended directory, potentially leading to unauthorized data access or system compromise. Defenders should prioritize verifying exposure in Tanium Comply and applying vendor remediation.

Defensive priority

Defenders should prioritize verifying exposure in Tanium Comply versions 2.32.0 to 2.32.252, 2.35.0 to 2.35.306, and 2.37.0 to 2.37.308, and applying vendor remediation.

Recommended defensive actions

• Verify Tanium Comply version and apply vendor remediation if necessary
• Review and update inventory to ensure affected versions are identified
• Monitor for potential exploitation attempts

Evidence notes

The CVE record and NVD detail page provide official vulnerability metadata. A vendor advisory is available from Tanium. The vulnerability has been addressed in the affected versions of Tanium Comply. Defenders should verify exposure and apply vendor remediation. The CVE record was published on 2026-09-09T03:17:25.557Z and has not been modified since then.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.