CVE-2026-5375

Description

References

• help.runzero.com/docs/release-notes · Release Notes
• runzero.com/advisories/runzero-platform-api-cred-infoleak-cve-2026-5375 · Vendor Advisory

runzero platform의 다른 취약점

• CVE-2026-5384보통 5.8An issue that could allow a credential to be updated and used for a task from outside of the authorized organization scope has been resolved…
• CVE-2026-5383보통 4.4An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance…
• CVE-2026-5382낮음 3.0An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved. This is an inst…
• CVE-2026-5381낮음 2.2An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: …
• CVE-2026-5380보통 5.3An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. T…