CVE-2026-1344 describes an insecure file permissions flaw in Tanium’s Enforce Recovery Key Portal, identified as CWE‑732. The incorrect assignment of file permissions could allow an attacker or compromised account to read, modify, or delete files that should be protected, leading to potential compromise of system data and configuration and undermining the integrity and confidentiality of sensitive information.

The vulnerable component is Tanium’s Enforce Recovery Key Portal, including the service_enforce_recovery-key-portal product version 1.62.4. The general product is indicated by the CPE strings, showing that any instance of Tanium Enforce Recovery Key Portal may be impacted; no other product versions are listed.

CVSS score of 6.5 signals a medium severity risk, and the EPSS <1% indicates that, as of the latest data, the likelihood of exploitation is low. It is not part of the CISA KEV list. Attackers would need access to the system hosting the portal or an authenticated user with sufficient privileges to benefit from the weakened permissions. Because the flaw involves incorrect permission assignment, the vulnerability can be exploited by simply reading or writing files that should be restricted, which could lead to data exposure or unauthorized configuration changes.