CVE-2026-5384: CWE-863 Incorrect Authorization in runZero Platform
CVE-2026-5384 is an incorrect authorization vulnerability in the runZero Platform that could allow a credential to be updated and used for tasks outside the authorized organization scope. This issue, classified as CWE-863, was resolved in version 4. 0. 26021. 0 of the platform. The vulnerability has a medium severity with a CVSS score of 5. 8. It requires high privileges and high attack complexity to exploit and does not involve user interaction. The impact includes a confidentiality breach but no integrity or availability impact. No known exploits are reported in the wild.
AI Analysis
Technical Summary
CVE-2026-5384 is an authorization flaw in the runZero Platform that allows credentials to be updated and used beyond the authorized organizational boundaries. This vulnerability is identified as CWE-863 (Incorrect Authorization). It has a CVSS 3.1 score of 5.8 (medium severity) with vector AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N, indicating network attack vector, high attack complexity, high privileges required, no user interaction, and a confidentiality impact with scope change. The issue was fixed in version 4.0.26021.0 of the runZero Platform. No vendor advisory or patch link is provided, and the platform is not cloud-hosted, so remediation depends on applying the fixed version.
Potential Impact
The vulnerability allows unauthorized updating and use of credentials across organizational boundaries, leading to a confidentiality breach. There is no impact on integrity or availability. Exploitation requires high privileges and high attack complexity, reducing the likelihood of widespread exploitation. No known exploits in the wild have been reported.
Mitigation Recommendations
The vulnerability was fixed in runZero Platform version 4.0.26021.0. Users should upgrade to this version or later to remediate the issue. Since no vendor advisory or patch link is provided, confirm patch availability and installation instructions with runZero's official resources. No additional mitigation steps are indicated.
CVE-2026-5384: CWE-863 Incorrect Authorization in runZero Platform
Description
CVE-2026-5384 is an incorrect authorization vulnerability in the runZero Platform that could allow a credential to be updated and used for tasks outside the authorized organization scope. This issue, classified as CWE-863, was resolved in version 4. 0. 26021. 0 of the platform. The vulnerability has a medium severity with a CVSS score of 5. 8. It requires high privileges and high attack complexity to exploit and does not involve user interaction. The impact includes a confidentiality breach but no integrity or availability impact. No known exploits are reported in the wild.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-5384 is an authorization flaw in the runZero Platform that allows credentials to be updated and used beyond the authorized organizational boundaries. This vulnerability is identified as CWE-863 (Incorrect Authorization). It has a CVSS 3.1 score of 5.8 (medium severity) with vector AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N, indicating network attack vector, high attack complexity, high privileges required, no user interaction, and a confidentiality impact with scope change. The issue was fixed in version 4.0.26021.0 of the runZero Platform. No vendor advisory or patch link is provided, and the platform is not cloud-hosted, so remediation depends on applying the fixed version.
Potential Impact
The vulnerability allows unauthorized updating and use of credentials across organizational boundaries, leading to a confidentiality breach. There is no impact on integrity or availability. Exploitation requires high privileges and high attack complexity, reducing the likelihood of widespread exploitation. No known exploits in the wild have been reported.
Mitigation Recommendations
The vulnerability was fixed in runZero Platform version 4.0.26021.0. Users should upgrade to this version or later to remediate the issue. Since no vendor advisory or patch link is provided, confirm patch availability and installation instructions with runZero's official resources. No additional mitigation steps are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- runZero
- Date Reserved
- 2026-04-01T20:20:42.640Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69d51c41aaed68159a2c16d4
Added to database: 4/7/2026, 3:01:21 PM
Last enriched: 4/14/2026, 3:54:12 PM
Last updated: 5/22/2026, 2:54:55 AM
Views: 57
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.