Incorrect Authorization Vulnerability in runZero Platform

CVE-2026-5382

What is CVE-2026-5382?

A security vulnerability has been identified in the runZero Platform, where improper authorization can lead to unauthorized exposure of sensitive records through MCP endpoints. This flaw potentially enables malicious actors to access data outside the limits intended for their organizational scope, should they exploit this weakness. The issue has been addressed in version 4.0.260206.0 of the platform, emphasizing the importance of regular updates to maintain security integrity.

References