This vulnerability in Tanium Comply allows an attacker with some privileges to bypass authorization controls by manipulating a user-controlled key. The flaw results from improper access control implementation, potentially enabling unauthorized modification or actions within the affected system. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity, requiring privileges, no user interaction, and limited integrity impact.

The vulnerability could allow an attacker with some level of privileges to perform unauthorized actions that affect the integrity of the system. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented in the provided data. Users should monitor Tanium's advisories for updates and apply patches once available.