CVE-2026-5374

CVE-2026-5374 is an authorization bypass vulnerability in the runZero Platform that allowed MCP agents to access remediation and asset information beyond their authorized organization scope. This issue, classified as CWE-863 (Incorrect Authorization), was remediated in version 4.0.260202.0 of the platform. The vulnerability carries a CVSS score of 5.8 (Medium severity) with a network-based attack vector requiring high privilege access and unusual conditions. While exploitation could result in high-impact confidentiality breaches affecting multiple systems, the attack requires elevated user privileges and specific configuration factors that limit the overall risk profile. There is no evidence of active exploitation in the wild, with no public exploit code available and minimal community attention. The vulnerability does not appear on the CISA Known Exploited Vulnerabilities list and remains inactive on security hotlists. The EPSS score of 0.00044 indicates extremely low probability of exploitation compared to other disclosed vulnerabilities.