The vulnerability enables the insertion of sensitive information into log files, which can lead to the disclosure of confidential data if the logs are accessed by unauthorized parties. It is classified as an information disclosure flaw consistent with CWE-532. The impact is limited to the potential exposure of whatever data is written to the logs at the time of the incident.

Affected systems are Tanium TanOS versions 1.8.4.0249, 1.8.5.0282, and 1.8.6.0150.

The CVSS score of 5.3 indicates moderate severity, while the EPSS score of less than 1% reflects a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. No explicit attack vector is disclosed; the risk assessment assumes that the attacker would need sufficient access to alter the logging configuration or trigger a condition that logs the sensitive data.