Executive Summary

CVE-2025-15324 is a local privilege escalation vulnerability in Tanium Engage affecting versions prior to 1.3.37 and 1.6.193.

The issue occurs when a file is deleted from or written to a user-controlled location on a system running the Tanium Client, which may allow an attacker with local access to escalate their privileges.

This vulnerability requires local access and user interaction, has low attack complexity, and low privileges required to exploit.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker with local access to escalate their privileges on the affected system.

The CVSS score indicates high impact on integrity and availability, meaning the attacker could potentially alter or disrupt system operations.

There is no impact on confidentiality according to the CVSS vector.

No workarounds or mitigations are available, so updating to fixed versions is necessary to address the issue.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

CVE-2025-15324 is a local privilege escalation vulnerability in Tanium Engage affecting versions prior to 1.3.37 and 1.6.193. Detection involves identifying if vulnerable versions of Tanium Engage are installed on the system.

Since the vulnerability arises from file deletion or writing in user-controlled locations on a system running the Tanium Client, monitoring for unusual file operations or privilege escalations locally may help detect exploitation attempts.

However, no specific detection commands or network-based detection methods are provided in the available information.

Useful 0 Not Useful 0

Mitigation Strategies

There are no workarounds or mitigations available for this vulnerability.

The immediate step to mitigate this vulnerability is to upgrade Tanium Engage to version 1.3.37 or later, or 1.6.193 or later, where the issue has been addressed.

Useful 0 Not Useful 0