CVE-2026-108331

LowCVSS 3.3

Published: 27/10/2026(UTC)Updated: 28/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

Tanium addressed an infinite loop vulnerability in the Threat Response Client Extension.

Risk Assessment

The vulnerability may cause the client to hang or consume excessive resources, disrupting normal operation and potentially being abused to cause denial of service.

Recommendation

Update the Threat Response Client Extension to the version containing the fix provided by Tanium.

Other vulnerabilities in Tanium Threat Response Client Extension

See all

CVE-2026-108333Low
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. The flaw involves improper memory management within this component.
CVE-2026-108330Low
Tanium addressed an information disclosure vulnerability in the Threat Response Client Extension.

Original NVD description (English source)

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS