The vulnerability is a classic SQL injection flaw in Tanium Provision that permits an attacker who can send input to the affected component to inject arbitrary SQL into backend queries. By manipulating these queries, an attacker could read, alter, or delete database records, potentially compromising data confidentiality and integrity.

Tanium Provision, a configuration and deployment platform developed by Tanium. No specific version information is provided in the advisory.

The CVSS score of 6.5 indicates moderate severity, and with no EPSS data or KEV listing, the exploit likelihood cannot be precisely quantified. Attacks would most likely target the Provision service through its exposed interfaces, leveraging unvalidated input. The impact is substantial for organizations that rely on Tanium for data integrity and security operations.