CVE-2026-6408 is an information disclosure vulnerability in Tanium Server that involves insufficiently protected credentials. The vulnerability affects specific versions of Tanium Server (7.6.4.0, 7.7.3.0, and 7.8.2.0). The CVSS 3.1 base score is 2.7, indicating low severity, with network attack vector, low attack complexity, high privileges required, no user interaction, and limited confidentiality impact. No official patch or remediation level is specified in the provided information.

The vulnerability could allow an attacker with high privileges to gain limited access to credential information due to insufficient protection, potentially leading to information disclosure. There is no indication of integrity or availability impact. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has addressed the vulnerability, it is recommended to monitor Tanium's official advisories for patches or updates. Until then, restrict high-privilege access to Tanium Server and follow best practices for credential management.