An infinite loop exists in the Threat Response Client Extension of Tanium, enabling excessive CPU consumption and potentially freezing the application. The weakness corresponds to uncontrolled resource consumption and integer overflow flaws, which can degrade system performance and ultimately prevent legitimate operations. While the impact is primarily denial of service, it may affect many endpoints that rely on this component.

The vulnerability affects both Tanium Endpoint Configuration Toolset Solution and Tanium threat-response-cx. Any endpoint that employs the Threat Response Client Extension is susceptible; specific affected version details are not provided in the advisory.

The CVSS score of 3.3 indicates a low severity assessment. The EPSS score is not available, and the vulnerability is not listed in the KEV catalog, suggesting limited public exploitation. The likely attack vector is inferred to be a local or remote configuration or execution context that triggers the extension; however, the description does not explicitly state the exact prerequisites for exploitation.