CVE-2026-5374: runZero Platform MCP information leak
An issue that allowed MCP agents to access remediation and asset information from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N (5.8 Medium). This issue was fixed in version 4.0.260202.0 of the runZero Platform.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5374?
CVE-2026-5374 has an estimated CVSS score indicative of high severity due to its incorrect authorization vulnerability.
How do I fix CVE-2026-5374?
To fix CVE-2026-5374, upgrade to the latest version of runZero Platform, specifically versions above 4.0.260202.0.
What type of vulnerability is CVE-2026-5374?
CVE-2026-5374 is categorized under CWE-863, which refers to Incorrect Authorization.
Which versions of runZero Platform are affected by CVE-2026-5374?
CVE-2026-5374 affects runZero Platform versions up to and including 4.0.260202.0.
What was the cause of the information leak in CVE-2026-5374?
The information leak in CVE-2026-5374 was caused by MCP agents being able to access remediation and asset information outside of authorized organization scope.