CVE-2026-5373

Description

References

• help.runzero.com/docs/release-notes · Release Notes
• runzero.com/advisories/runzero-platform-su-privesc-cve-2026-5373 · Vendor Advisory

More vulnerabilities in runzero platform

• CVE-2026-5384MEDIUM 5.8An issue that could allow a credential to be updated and used for a task from outside of the authorized organization scope has been resolved…
• CVE-2026-5383MEDIUM 4.4An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance…
• CVE-2026-5382LOW 3.0An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved. This is an inst…
• CVE-2026-5381LOW 2.2An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: …
• CVE-2026-5380MEDIUM 5.3An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. T…