A vulnerability in Tanium Enforce allows an attacker to supply a compressed bomb that expands to a large data size when processed. This can cause the Enforce system to consume excessive CPU or memory, leading to degraded performance or complete denial of service. The weakness is classified as CWE‑409, which relates to resource exhaustion attacks. The impact is limited to disruption of the Enforce service but can affect the availability of dependent systems if Enforce is a critical component of the infrastructure.

The affected product is Tanium Enforce. No specific version numbers were provided in the vendor information, so all installations of Tanium Enforce that have not applied the Tanium update referenced in the advisory are at risk. Operators should verify their Enforce version against the vendor’s release notes for the remediation patch.

The CVSS score of 7.5 indicates a high severity that affects availability. The EPSS score is not available, so the current exploitation probability cannot be quantitatively assessed; however, the vulnerability is not listed in the CISA KEV catalog, suggesting that widespread exploitation has not yet been observed. Based on the description, the likely attack vector is a remotely delivered compressed payload processed by the Enforce component, so remote hosts that are able to submit data to Enforce must be considered potential entry points.