CVE-2026-5381: runZero Platform task information leak

Q: What is the severity of CVE-2026-5381?

CVE-2026-5381 has an estimated CVSS score of 2.2, categorized as low severity.

Q: What does CVE-2026-5381 affect?

CVE-2026-5381 affects the runZero Platform versions up to 4.0.260205.0.

Q: What is the nature of the vulnerability in CVE-2026-5381?

CVE-2026-5381 involves an information leak that can expose task information beyond the authorized organization scope.

Q: How do I fix CVE-2026-5381?

To fix CVE-2026-5381, upgrade to a version of the runZero Platform that is higher than 4.0.260205.0.

Q: What type of vulnerability is CVE-2026-5381?

CVE-2026-5381 is classified under CWE-863, indicating an issue with incorrect authorization.

Published Apr 7, 2026

Updated

An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N (2.2 Low). This issue was fixed in version 4.0.260205.0 of the runZero Platform.

Affected Software

2 affected components

runZero runZero Platform<4.0.260205.0

Remediation

Information

This issue was fixed in version 4.0.260205.0 of the runZero Platform

Event History

Apr 7, 2026

CVE Published

via MITRE·02:12 PM

Data Sourced

via MITRE·02:12 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeaknessAffected Software

Aug 24, 58276

Event

via FIRST·03:33 PM

Frequently Asked Questions

What is the severity of CVE-2026-5381?

CVE-2026-5381 has an estimated CVSS score of 2.2, categorized as low severity.

What does CVE-2026-5381 affect?