CVE-2026-5379

概要

参考情報

• help.runzero.com/docs/release-notes · Release Notes
• runzero.com/advisories/runzero-platform-mcp-cert-infoleak-cve-2026-5379 · Vendor Advisory

runzero platform のその他の脆弱性

• CVE-2026-5384中 5.8An issue that could allow a credential to be updated and used for a task from outside of the authorized organization scope has been resolved…
• CVE-2026-5383中 4.4An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance…
• CVE-2026-5382低 3.0An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved. This is an inst…
• CVE-2026-5381低 2.2An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: …
• CVE-2026-5380中 5.3An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. T…