What is the CVSS score of CVE-2026-5374?

CVE-2026-5374 has a CVSS 3.1 base score of 5.8 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2026-5374?

Yes, a patch is available for CVE-2026-5374. Update the affected software to the latest version immediately.

Platform CVE-2026-5374

EUVD-2026-19635 MEDIUM

Incorrect Authorization (CWE-863)

2026-04-07 runZero

GHSA-9359-vm49-5gpx

Authentication Bypass Platform Runzero

5.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.8 MEDIUM

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

4.0.260202.0

EUVD ID Assigned

Apr 07, 2026 - 14:30 euvd

EUVD-2026-19635

Analysis Generated

Apr 07, 2026 - 14:30 vuln.today

CVE Published

Apr 07, 2026 - 14:10 nvd

MEDIUM 5.8

DescriptionCVE.org

An issue that allowed MCP agents to access remediation and asset information from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N (5.8 Medium). This issue was fixed in version 4.0.260202.0 of the runZero Platform.

AnalysisAI

Runzero Platform versions prior to 4.0.260202.0 allow authenticated administrators with high privileges to access remediation and asset information across organizational boundaries through MCP agents, exposing sensitive data from unauthorized organization scopes. The vulnerability stems from improper authorization controls (CWE-863) and requires high-privilege account compromise to exploit, carrying a CVSS score of 5.8 (Medium). Vendor-released patch version 4.0.260202.0 resolves this issue.

Technical ContextAI

The Runzero Platform uses MCP (Multi-platform Configuration Protocol or similar agent framework) agents to retrieve and manage remediation and asset inventory information. The vulnerability exists in the authorization layer that validates whether an authenticated user/agent has permission to access resources belonging to specific organizations. CWE-863 (Incorrect Authorization) indicates that the platform failed to properly enforce scope boundaries-specifically, it did not verify that MCP agent requests for remediation and asset data were limited to the authenticated user's authorized organization scope. Instead, agents could query and retrieve sensitive information from outside their intended organizational context. The CVSS vector (AV:N/AC:H/PR:H/UI:N/S:C) indicates the flaw is reachable over the network but requires high-privilege authentication, high attack complexity, and impacts scope (affecting other organizational contexts) with confidentiality impact. The CPE cpe:2.3:a:runzero:platform:*:*:*:*:*:*:*:* indicates all versions of the Runzero Platform are potentially affected prior to the fix.

RemediationAI

Upgrade Runzero Platform immediately to version 4.0.260202.0 or later, which includes the authorization fix for MCP agent scope validation. Organizations unable to patch immediately should review administrative access logs for high-privilege accounts accessing MCP agents and monitor for cross-organizational remediation or asset data queries that may indicate exploitation. Implement network-level restrictions limiting MCP agent communication to authorized organizational scopes if platform-level granular access controls are available. Consult the vendor advisory at https://www.runzero.com/advisories/runzero-platform-mcp-infoleak-cve-2026-5374/ for detailed deployment guidance and any interim mitigations provided by runZero.