Tanium disclosed a denial of service vulnerability in Tanium Server that can lead to resource exhaustion, classified as CWE-770. If successfully exploited, an attacker could force the server to allocate excessive resources, disrupting normal operation and preventing legitimate users from accessing Tanium services.

The vulnerability affects Tanium Tanium Server. No specific affected versions are listed in the advisory, so all installed instances of Tanium Server are potentially exposed until a patch is applied.

The CVSS score of 5.3 indicates a moderate risk. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, implying it has not yet been widely exploited in the wild. Based on the description, the likely attack vector is remote; an attacker may trigger the flaw by sending specially crafted requests to the Tanium Server interface, but exact conditions are not detailed in the advisory. Once the resource limits are exceeded, the server could become unresponsive to legitimate traffic, impacting availability of all Tanium services.