The vulnerability in Tanium Server allows an incorrect privilege assignment that can elevate an attacker's privileges beyond what was intended. This flaw enables malicious activities such as executing commands, accessing sensitive data, or modifying configurations that should be restricted, undermining both confidentiality and integrity.

The flaw affects Tanium Server deployments. No specific version information is supplied, so all installations of Tanium Server that have not applied the vendor’s patch are potentially impacted.

The CVSS score of 6.6 indicates a moderate severity. EPSS information is not available, so the current likelihood of exploitation is uncertain; however, the flaw is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack could be carried out by an authenticated user or through remote interactions with the Tanium Server, allowing the attacker to gain higher privileges than granted.