CVE-2026-5374: Runzero Platform: hatalı yetkilendirme

Açıklama (NVD)

An issue that allowed MCP agents to access remediation and asset information from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N (5.8 Medium). This issue was fixed in version 4.0.260202.0 of the runZero Platform.

Özet bilgiler

Ürün

Runzero Runzero Platform

CVSS v3.1

5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

EPSS

%0,22 (yüzdelik 12)

CWE

CWE-863

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• help.runzero.com
• www.runzero.com
• CWE-863