Tanium Interact contains an uncontrolled resource consumption flaw (CWE‑400) that allows an attacker to cause the service to allocate excessive system resources. Such over‑consumption can result in degraded performance or a complete denial of service to legitimate users. The vulnerability is confined to the Interact component and does not directly lead to code execution or data exfiltration.

The affected product is Tanium Interact. Vulnerable releases include version 3.2.196, 3.5.102 and 3.8.46.

The CVSS score of 2.7 indicates a low severity risk. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting low likelihood of widespread exploitation. Based on the nature of the flaw, the attack vector is inferred to be remote or local access to the Interact service where a malicious client can trigger excessive resource usage. The impact is primarily to availability rather than confidentiality or integrity.