The vulnerability involves improper certificate validation within Tanium’s Stream Client Extension, which could allow an attacker to present a forged or tampered certificate and thus intercept or modify stream traffic. This flaw is categorized under CWE‑295 and could potentially enable an attacker to execute code or gain unauthorized access by exploiting the compromised integrity of the data transmitted over the stream.

Affecteds include Tanium’s Endpoint Configuration Toolset Solution and the cx‑stream product. No specific version numbers are listed in the provided data, so any installation of these products that consumes the Stream Client Extension may be susceptible until an update is applied.

The CVSS score of 6.5 indicates a moderate to high severity, and although the EPSS score is not available, the lack of a KEV listing suggests no confirmed exploitation yet. Nevertheless, attackers with network reach could exploit the flaw by intercepting SSL/TLS traffic and injecting malicious data, making the risk significant, particularly for organizations that rely on the extension for critical configuration or data streaming.