This vulnerability allows an attacker to cause the Tanium Performance Client Extension to consume excessive system resources. The weakness is a unique resource exhaustion flaw (CWE-770) that can degrade performance and potentially lead to denial of service for legitimate users. The exploit does not grant arbitrary code execution but can disrupt service availability by exhausting CPU, memory, or other resources on the targeted host.

Affected are Tanium Endpoint Configuration Toolset Solution and Tanium Performance Client Extension. No specific version numbers are supplied in the advisory, so all releases that contain the Performance Client Extension are potentially impacted until a patch is applied.

The CVSS score of 5.5 indicates moderate severity. EPSS information is unavailable, and the vulnerability is not listed in CISA's KEV catalog. While the description does not detail the attack vector, the likely scenario requires local use of the Performance Client Extension, potentially needing elevated permissions on the host. Exploitation would involve triggering the resource-consuming functionality, leading to system slowdown or service interruption.