CVE-2026-87088 is an OS command injection vulnerability in Tanium Enforce that arises from improper neutralization of special elements in OS commands. This flaw could allow an attacker to execute unauthorized code on affected versions 2.9, 2.10, and 3.0. The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity, with attack vector local, attack complexity high, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation could lead to unauthorized code execution on the affected system, impacting confidentiality, integrity, and availability of the Tanium Enforce environment. The attack requires local access, high attack complexity, and user interaction, which limits the ease of exploitation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users and monitor for suspicious activity related to command execution within Tanium Enforce.