The vulnerability in Tanium Connect allows an attacker to inject operating‑system commands through the Connect interface, resulting in unauthorized code execution. This can give the attacker elevated privileges on the Windows Tanium Module Server, compromising the confidentiality, integrity, and availability of the managed endpoint.

Products affected are Tanium Connect, which runs on the Windows Tanium Module Server. The issue is specific to this module and does not affect other Tanium components without using the Connect interface.

The CVSS score of 8.8 indicates a high severity. The EPSS score is not reported, and the vulnerability is not yet listed in the CISA KEV catalog, but the lack of a low exploitation probability does not diminish the risk, especially if the Connect interface is exposed to untrusted networks. The likely attack vector is remote exploitation via the Connect service, which, if reachable from untrusted hosts, could be used for unauthenticated or low‑privilege attackers to execute commands and elevate privileges.