A flaw in Tanium End‑User Notifications allows a user with local access to override permissions and gain elevated system privileges. The root cause, as indicated by the CWE‑59 classification, involves improper restriction of resources, which may include path handling. This flaw can enable a local attacker to execute privileged actions or modify protected resources, leading to confidentiality, integrity, and availability impacts.

The affected products are Tanium Endpoint Configuration Toolset Solution and Tanium End‑User CX. No specific product versions were listed in the advisory, so all released versions may be impacted until an official update is issued.

The CVSS score of 7.8 classifies the issue as high severity. The EPSS score is not available and the vulnerability is not present in the CISA KEV catalog, indicating no documented exploitation yet. The attack vector is inferred from the CWE‑59 classification and the description, indicating a local context requiring authorized host access. Without a public exploit, the immediate threat remains theoretical, but the high impact warrants prompt mitigation.