Platform EUVD-2026-19635

This vulnerability presents a moderate real-world risk despite its 5.8 CVSS score. The attack vector is network-based and unauthenticated access is not required-however, exploitation mandates high privilege (PR:H) within the Runzero Platform, significantly limiting the attacker pool. Attack complexity is high (AC:H), further reducing exploitation likelihood. The EPSS score and KEV status are not provided in the input, preventing assessment of empirical exploitation trends or CISA priority designation. However, the scope boundary violation (S:C) is particularly concerning in multi-tenant SaaS environments, as a compromised high-privilege account can leak sensitive remediation and asset data across organizational silos. The confidentiality impact is high (C:H), indicating exposure of sensitive operational security information. For organizations using Runzero in multi-tenant deployments with stringent data isolation requirements, this is a priority fix; for single-organization deployments or those with strong administrative access controls, the risk is lower but not negligible. The high-privilege requirement effectively gates exploitation to insider threats or accounts compromised via lateral movement, making post-authentication access control a critical detection point.

A threat actor compromises a Runzero Platform administrative account through credential theft or phishing, then leverages the high-privilege credentials to configure or manipulate MCP agents to query remediation and asset information from organizations other than the one the account legitimately administers. Due to the improper authorization controls, the MCP agent returns sensitive cross-organizational data without enforcing scope boundaries. The attacker exfiltrates this data to reconnaissance competitors, support business espionage, or identify high-value targets across multiple customer organizations. No public exploit code has been identified, but the flaw is straightforward enough to exploit once administrative access is obtained, making this a credible post-compromise lateral escalation attack.