A Null Pointer Dereference flaw in Tanium’s Provision component allows an attacker to cause the service to crash, resulting in a denial of service. The vulnerability is classified as CWE-690, indicating that a reference may be dereferenced without checking for null. An attacker who can trigger this condition can disrupt availability for users of the affected system, potentially impacting critical business processes.

The vulnerability affects the Tanium Provision product. No specific affected versions are provided in the advisory, so all installations of Tanium Provision should be treated as potentially vulnerable until updated.

The CVSS score of 7.5 places this issue in the high severity range, suggesting significant impact if exploited. The EPSS score is not available, and the issue is not listed in the CISA KEV catalog. The attack vector is not specified in the advisory; therefore, the likely attack vector is inferred to be remote, as a network-accessible service is being destabilized.