CVE-2025-15312 Tanium addressed an improper output sanitization vulnerability in TanOS.
Attackers can exploit improper output sanitization in Tanium Appliance to execute scripts or access data.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-15312?
CVE-2025-15312 is a medium-severity cross-site scripting vulnerability in Tanium Appliance, published on 5 Feb 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Tanium addressed an improper output sanitization vulnerability in Tanium Appliance.
Weakness: CWE-116
Which versions are affected by CVE-2025-15312?
It affects 1 product.
Products include Tanium Tanos.
How do I fix CVE-2025-15312?
No fix has been published for CVE-2025-15312 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2025-15312 being exploited?
There is no known exploitation of CVE-2025-15312 in the wild and no public exploit code.
Other vulnerabilities in Tanium Appliance
- CVE-2025-15311 Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.
- CVE-2025-13225 Tanium addressed an arbitrary file deletion vulnerability in TanOS.
- CVE-2026-2605 Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
- CVE-2025-15323 Tanium addressed an improper certificate validation vulnerability in Tanium Appliance.
- CVE-2025-15321 Tanium addressed an improper input validation vulnerability in Tanium Appliance.
Sources
Also known as GHSA-vp3j-ppf5-cqpf.