4.7Medium
CVE-2026-2408Use-after-free in Cloud Workloads
Description
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension.
Weakness (CWE):
CWE-416
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Tanium | Cloud Workloads | 1.0.222 – < 1.0.222 | |
| tanium | service cloudworkloads | 1.0.221 |
References and patches
- TAN-2026-005 Vendor Advisory
CPE matches (NVD) (1)
cpe:2.3:a:tanium:cloud_workloads:*:*:*:*:*:*:*:*< 1.0.222