The vulnerability in Tanium Connect allows an attacker to execute arbitrary code, effectively granting remote code execution privileges. It arises from a weakness classified as CWE‑78, indicating an OS command injection flaw. The official description does not detail the specific conditions or attacker requirements, but the capability to run arbitrary commands would enable full compromise of the host where Connect is deployed.

Tanium Connect is the sole product mentioned as affected. No particular versions or operating system contexts are listed in the available data.

The CVSS score of 8.8 classifies this flaw as high severity, suggesting significant impact if exploited. The EPSS value is not available, so the current exploitation probability is unknown; however, the lack of listing in the CISA KEV catalog indicates no widespread, publicly documented use as of now. Because the advisory does not state an explicit attack vector, it is inferred that the flaw could be leveraged remotely or by privileged local users. The combination of a high CVSS and the potential for arbitrary command execution results in a substantial risk to affected installations.