CVE-2026-5381

CVE-2026-5381 is an authorization bypass vulnerability affecting the runZero Platform that could allow unauthorized disclosure of task information outside an organization's authorized scope. This issue represents an instance of CWE-863 (Incorrect Authorization) and was remediated in version 4.0.260205.0. The vulnerability has a CVSS score of 2.2 (Low) with a network attack vector requiring high privileges and high attack complexity, resulting in limited confidentiality impact with no integrity or availability concerns. The attack requires high-level user privileges and significant environmental setup, substantially reducing practical exploitability. There is no evidence of active exploitation or public exploit code availability. The vulnerability does not appear on the CISA Known Exploited Vulnerabilities (KEV) catalog and shows minimal community attention with an EPSS score of 0.00039, indicating very low probability of exploitation in the wild. Organizations should prioritize patching to version 4.0.260205.0 as part of routine maintenance rather than emergency response.