CVE-2025-15331: 
NixOS vulnerability analysis and mitigation

CVE-2025-15331 is an uncontrolled resource consumption (Incomplete Cleanup) vulnerability in Tanium Connect that allows authenticated network attackers to trigger denial of service conditions. It affects Tanium Connect versions 5.22.0 through 5.22.99 and 5.26.0 through 5.26.86. The vulnerability was published on February 5, 2026, and has been patched by Tanium. It carries a CVSS v3.1 base score of 4.3 (Medium) (Tanium Advisory).

The vulnerability is classified as CWE-459 (Incomplete Cleanup), with an estimated association to CWE-400 (Uncontrolled Resource Consumption). An authenticated, low-privileged attacker with network access can send requests to Tanium Connect that cause the application to fail to properly release or clean up resources, leading to resource exhaustion. No user interaction is required, and the attack does not change the scope of impact beyond the affected component (Tanium Advisory).

Successful exploitation results in a low availability impact — specifically, denial of service conditions affecting the Tanium Connect service. There is no impact to confidentiality or integrity. The vulnerability can cause service disruption for organizations relying on Tanium Connect for endpoint management data integration, but does not enable data exfiltration or privilege escalation (Tanium Advisory).

There is no public proof-of-concept exploit available, and no evidence of in-the-wild exploitation has been reported. The EPSS score is approximately 0.039%, indicating a very low probability of exploitation in the near term. No threat actor attribution or CISA KEV catalog listing has been identified for this CVE (Tanium Advisory).

Tanium has released patched versions addressing this vulnerability. Users should upgrade Tanium Connect to version 5.22.100 or later (for the 5.22.x branch) or 5.26.87 or later (for the 5.26.x branch). As interim mitigations, organizations should restrict network access to Tanium Connect to authorized users only, implement network segmentation to limit authenticated access, and monitor system resource utilization for anomalies (Tanium Advisory).