An uncontrolled resource consumption vulnerability in Tanium Enforce allows an attacker to deliberately exhaust system resources, potentially leading to service disruption. The weakness is coded as CWE‑400, reflecting an inability to prevent excessive use of critical resources. If exploited, the attack could exhaust CPU, memory, or disk I/O on the impacted system, causing the Enforce service to become unresponsive and denying legitimate users access to enforcement actions.

The product affected is Tanium Enforce, as identified by the vendor/product name Tanium:Enforce. No specific version information was supplied, so all deployments of Tanium Enforce are potentially impacted until the vendor’s advisory confirms a patched release. Users should verify the exact build of Enforce to confirm whether it contains the fix.

The CVSS assessment gives a score of 7.5, indicating a high severity risk. EPSS data is not available, so the current exploitation probability cannot be quantified, but the issue is not listed in the CISA KEV catalog. Attackers would have to achieve some remote or local access to the Enforce component, likely over the network, to trigger the resource exhaustion. Because the attack vector is not described explicitly, it is inferred that remote exploitation is possible, though specific prerequisites are not detailed in the advisory.