TI-2026-04701 CVE-2026-5373 · GHSA-jc2w-m6fm-mc3g
runZero Platform superuser privilege escalation
Priority LOW 38
An issue that allowed all-organization administrators to promote accounts to superuser status has been resolved.
runZero
Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
runZero records in CISA KEVNo runZero vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
15 records
TI-2026-04700 CVE-2026-5372 · GHSA-p3v6-665m-m43q
runZero Platform SQL injection in saved queries
Priority LOW 30
An issue that allowed a SQL injection attack vector related to saved queries (introduced in version 4.0.260123.0).
TI-2026-84340 CVE-2026-110265 · GHSA-prhh-mv99-87h8
SQL injection in runZero search exposes other organizations' results
Priority LOW 29
A specially crafted malformed search query could return results from outside a user's organization.
TI-2026-04706 CVE-2026-5378 · GHSA-v27j-88v5-qwrq
runZero Platform user creation leak
Priority LOW 29
An issue that allowed administrators to create and update users outside of their authorized organization scope has been resolved.
TI-2026-04704 CVE-2026-5376 · GHSA-gf6w-7f3p-cmx4
runZero Platform session timeout failure
Priority LOW 28
An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved.
TI-2026-04712 CVE-2026-5384 · GHSA-fj9r-v5j5-9xf4
runZero Platform incorrect credential scope
Priority LOW 25
An issue that could allow a credential to be updated and used for a task from outside of the authorized organization scope has been resolved.
TI-2026-04702 CVE-2026-5374 · GHSA-9359-vm49-5gpx
runZero Platform MCP information leak
Priority LOW 25
An issue that allowed MCP agents to access remediation and asset information from outside of the authorized organization scope has been resolved.
TI-2026-04708 CVE-2026-5380 · GHSA-xm23-f7v4-5j82
runZero Platform cleartext secret exposure
Priority LOW 23
An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved.
TI-2026-06849 CVE-2026-7778 · GHSA-v9q7-47h2-cg7c
runZero Platform dashboard configuration exposure
Priority LOW 22
An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved.
TI-2026-04711 CVE-2026-5383 · GHSA-542q-mcfv-688v
runZero Explorer missing authorization check
Priority LOW 20
An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved.
TI-2026-56469 CVE-2026-81846 · GHSA-29cr-9cjx-c8cg
runZero MCP 'Findings summaries' Data Leak
Priority LOW 16
An authorization bypass in the runZero Platform MCP service has been resolved in version 5.1.260826.0.
TI-2026-04710 CVE-2026-5382 · GHSA-69vg-gq6x-ppc2
runZero Platform MCP endpoint information leak
Priority LOW 14
An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved.
TI-2026-04707 CVE-2026-5379 · GHSA-pqp2-x3gp-9g37
runZero Platform MCP certification information leak
Priority LOW 14
An issue that allowed MCP agents to access certificate information from outside of their authorized organization scope has been resolved.
TI-2026-04703 CVE-2026-5375 · GHSA-5fhv-ppcw-vh7h
runZero Platform API credential information leak
Priority LOW 13
An issue that could allow a user with access to a credential to view sensitive fields through an API response has been resolved.
TI-2026-04709 CVE-2026-5381 · GHSA-hm34-jchw-p8x7
runZero Platform task information leak
Priority LOW 11
An issue that could expose task information outside of the authorized organization scope has been resolved.