CVE-2026-5375: runZero Platform API credential information leak
An issue that could allow a user with access to a credential to view sensitive fields through an API response has been resolved. This is an instance of CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N (2.7 Low). This issue was fixed in version 4.0.260203.0 of the runZero Platform.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5375?
CVE-2026-5375 is classified with a CVSS score indicating a significant risk due to sensitive information exposure.
How do I fix CVE-2026-5375?
To resolve CVE-2026-5375, users should update the runZero Platform to version 4.0.260203.0 or later.
What kind of information is leaked in CVE-2026-5375?
CVE-2026-5375 allows unauthorized users to view sensitive credential fields through API responses.
Who is affected by CVE-2026-5375?
Users of the runZero Platform versions prior to 4.0.260203.0 are affected by CVE-2026-5375.
What is the root cause of CVE-2026-5375?
CVE-2026-5375 stems from a vulnerability that exposes sensitive information to unauthorized actors via API access.