CVE-2025-15318 Details
Description
Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.
An arbitrary file deletion vulnerability has been identified in Tanium's End-User Notifications and Endpoint Configuration Toolset Solution. This vulnerability allows an attacker with privileged access to a system running the Tanium Client to delete or overwrite arbitrary files.
Users can upgrade to Tanium End-User Notifications version 1.18.1112 or later. For the Endpoint Configuration Toolset Solution, users should upgrade to Update 16 (v1.40.48) or later for the 2024H1 Release, and to Update 5 (v1.47.16) or later for the 2024H2 Release. Tanium on-prem customers who use ECM should deploy version 2.2.135 or later or 2.9.34 or later to all endpoints. Tanium Cloud customers who use ECM should deploy version 2.11.44 or later or 2.12.43 or later to all endpoints.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://security.tanium.com/TAN-2025-017 | Tanium | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-59 | Improper Link Resolution Before File Access ('Link Following') | Tanium |
Affected Products
| Product | Versions |
|---|---|
| tanium end-user notifications | >= 1.18, < 1.18.10079 >= 10.0, < 10.0.14 >= 10.1, < 10.1.20 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | Tanium |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 9, 2026 | Initial Analysis | [email protected] |
| Feb 10, 2026 | CVE Modified | Tanium |
| Feb 9, 2026 | New CVE Received | Tanium |