CVE-2026-121565

Name of the Vulnerable Software and Affected Versions Tanium TanOS (affected versions not specified) Tanium Asset (affected versions not specified)

Description Multiple components perform improper certificate validation, which allows TLS connections to be intercepted via Man-in-the-Middle (MITM) attacks. This occurs because the software accepts certificate chains anchored on intermediate Certificate Authorities (CAs) with compromised private keys, potentially leading to the interception of sessions and credentials.

Recommendations Update Tanium TanOS to the latest version to distrust the compromised intermediate CA certificates. Update Tanium Asset to the latest version to distrust the compromised intermediate CA certificates.