CVE-2026-87030

Undergoing Analysis Undergoing Analysis - In Progress

Path Traversal Vulnerability in Tanium Comply

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Tanium

Description

Tanium addressed a path traversal vulnerability in Comply.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-87030

EUVD

EUVD-2026-74552

Affected Vendors & Products

Vendor	Product	Version / Range
tanium	comply	to 2.32.252 (exc)
tanium	comply	to 2.35.306 (exc)
tanium	comply	to 2.37.308 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

CVE-2026-87030 is a path traversal vulnerability in Tanium's Comply product. It allows an authenticated user with specific permissions to delete arbitrary files on the Tanium Module Server by exploiting improper file path validation.

Detection Guidance

Detecting this vulnerability requires checking if your Tanium Comply instance is running an affected version. Review installed Comply versions against the affected releases: 2025H1 (v2.32 to v2.32.252), 2025H2 (v2.35 to v2.35.306), or 2026H1 (v2.37 to v2.37.308). Use Tanium's interface or commands to verify the version. If vulnerable, apply the latest updates immediately.

Impact Analysis

This vulnerability could allow an attacker with Comply Deployment Write permission to delete critical files on the server, potentially disrupting operations, causing data loss, or leading to system instability. The impact depends on the files deleted and the system's role.

Compliance Impact

The vulnerability could allow unauthorized file deletion on the Tanium Module Server, potentially impacting data integrity and availability. This may affect compliance with standards like GDPR (data integrity requirements) and HIPAA (integrity and availability of protected health information).

Mitigation Strategies

Apply the latest updates for your Comply release: Update 24 for 2025H1, Update 14 for 2025H2, or Update 7 for 2026H1. Ensure only authorized users have the Comply Deployment Write permission.

Hi! I’m here to help you understand CVE-2026-87030. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70