The vulnerability discovered in Tanium End‑User Notifications allows an attacker who can execute code locally on a system to gain higher privileges. The flaw relates to improper privilege management (CWE‑282) and path traversal (CWE‑59). An adversary who can interact with the notification service can elevate local privileges, potentially compromising the entire endpoint.

Affected products include Tanium Endpoint Configuration Toolset Solution and Tanium end‑user‑cx. Specific versions were not disclosed in the advisory, so any deployment of these components running before the vendor release that contains the fix is considered vulnerable.

The CVSS metric for this flaw is 7.8, indicating a high severity. Exploitation is limited to local attackers with the ability to run code, and no publicly documented exploit is available. The EPSS score is currently unavailable, and the vulnerability is not listed in CISA KEV. Administrators should consider the risk high for systems that allow local code execution or where privileged notification handling exists.