CVE-2025-15331
Unknown Unknown - Not Provided
Uncontrolled Resource Consumption in Tanium Connect Causes Denial of Service

Publication date: 2026-02-05

Last updated on: 2026-02-10

Assigner: Tanium

Description
Tanium addressed an uncontrolled resource consumption vulnerability in Connect.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-05
Last Modified
2026-02-10
Generated
2026-06-16
AI Q&A
2026-02-05
EPSS Evaluated
2026-06-14
NVD
CVE-2025-15331
EUVD
EUVD-2025-206837
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
tanium connect From 5.22.0 (inc) to 5.22.100 (exc)
tanium connect From 5.26.0 (inc) to 5.26.87 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-459 The product does not properly "clean up" and remove temporary or supporting resources after they have been used.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-15331 is an uncontrolled resource consumption vulnerability in Tanium Connect. It allows an authenticated Tanium user with Connect Write permission to consume an unlimited amount of disk space on the Tanium Management Server (TMS). This can lead to resource exhaustion on the server.

Impact Analysis

The vulnerability can impact you by allowing an authenticated user to exhaust disk space on the Tanium Management Server. This uncontrolled resource consumption can degrade system performance, cause service disruptions, or potentially lead to denial of service conditions.

Compliance Impact

I don't know

Detection Guidance

There are no specific detection commands or methods provided to identify this vulnerability on your network or system.

Mitigation Strategies

Immediate mitigation steps include upgrading Tanium Connect to a fixed version.

  • Upgrade to Connect v5.22.100 or later for the 7.4 and 7.5 releases.
  • Upgrade to Update 16 (v5.22.100) or later for the 2024H1 release.
  • Upgrade to Update 5 (v5.26.87) or later for the 2024H2 release.

No workarounds or other mitigations are available.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-15331. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart