CVE-2026-2350: 
NixOS vulnerability analysis and mitigation

CVE-2026-2350 is an insertion of sensitive information into log file vulnerability (CWE-532) affecting Tanium Interact and TDS. Tanium addressed this issue in a security advisory published on February 27, 2026. Affected versions include Tanium Interact 3.2.0–3.2.195 and 3.5.0–3.5.101. The vulnerability carries a CVSS v3.1 base score of 6.5 (Medium) (Tanium Advisory).

The vulnerability is classified as CWE-532 (Insertion of Sensitive Information into Log File), meaning the application writes sensitive data to log files that may be accessible to unauthorized parties. An authenticated attacker with low privileges and network access can exploit this by reading log files that contain sensitive information inadvertently recorded during normal application operation. No user interaction is required and attack complexity is low, making exploitation straightforward for any authenticated user with log file read access (Tanium Advisory).

Successful exploitation results in unauthorized disclosure of sensitive information stored in log files, impacting confidentiality with no effect on integrity or availability. Because log files are often accessible to multiple users and systems, the exposure may extend beyond the intended audience. Depending on what data is logged, this could include credentials, session tokens, query results, or other confidential operational data processed by Tanium Interact and TDS (Tanium Advisory).

There is no public proof-of-concept exploit and no evidence of in-the-wild exploitation at this time. The EPSS score is approximately 0.031%, indicating a low probability of exploitation in the near term. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Despite the low attack complexity, exploitation requires authenticated network access with at least low-privilege credentials (Tanium Advisory).

Tanium has released patched versions to address this vulnerability. Organizations should upgrade Tanium Interact to version 3.2.196 or later (for the 3.2.x branch) or version 3.5.102 or later (for the 3.5.x branch). As an interim measure, implement strict access controls on log files to limit who can read them, and consider enabling log encryption at rest and in transit. Full patch details are available in the Tanium security advisory (Tanium Advisory).