CVE-2025-15340: Tanium Comply

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Tanium addressed an incorrect default permissions vulnerability in Comply.

Affected products

• Tanium Comply: from 2.24.0, before 2.24.159 (fixed in 2.24.159); from 2.29.0, before 2.29.124 (fixed in 2.29.124); from 2.32.0, before 2.32.155 (fixed in 2.32.155)

Published 2026-02-05. Last modified 2026-06-17.