CVE-2025-15311

Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.

Scoring

Severity

HIGH

CVSS base score

7.8

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS probability

0.16%

CWE

CWE-150

Published

2026-02-05

Last modified

2026-03-12

Affected products

• Tanium Tanium Appliance
• Tanium Tanium Appliance
• Tanium Tanium Appliance

Weakness type

• CWE-150

Related vulnerabilities

• CVE-2026-82710 — Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata
• CVE-2026-82584 — Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata
• CVE-2026-19591 — OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS...
• CVE-2026-72847 — broot Terminal Escape Sequence Injection via Unsanitized File and Directory Names in the Tree View
• CVE-2026-75483 — powerlevel10k Control Character Injection via package.json Version
• CVE-2026-73506 — Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data
• CVE-2026-73414 — Shescape: Shell injection via unescaped parentheses on Windows with CMD
• CVE-2026-73036 — Bash-it barbuk Theme 3.2.0 Terminal Escape Sequence Injection via pyproject.toml

Markdown version · Browse all CVEs