The vulnerability lies in Tanium Server’s failure to log certain actions or events, which is identified by the weakness CWE-778. Because the system does not capture all relevant actions, an attacker with access to the affected server could conceal malicious actions, and security teams would be unable to assess or investigate incidents fully. The direct impact is limited to loss of auditability and the potential for covert operations, but no immediate data corruption or remote execution is implied.

Products affected by this issue are Tanium Server. No specific version information is documented, so all current releases of Tanium Server may be impacted until a patch is applied.

The CVSS score of 2.7 indicates a low severity vulnerability. The EPSS score is not available and the issue is not listed in CISA’s KEV catalog, suggesting a low likelihood of active exploitation. Because the weakness is limited to logging, an attacker would still need local or remote access to the server to benefit from the lack of logs, and the vulnerability does not provide a direct attack vector to compromise the system or exfiltrate data.