CVE-2026-81846: CWE-639 Authorization bypass through User-Controlled key in runZero Platform

This vulnerability in the runZero Platform MCP service involves an authorization bypass via a user-controlled key, categorized under CWE-639. The flaw could allow an attacker with low privileges to bypass authorization checks under conditions requiring high attack complexity. The vulnerability impacts confidentiality with limited scope and does not affect integrity or availability. The vendor has published the vulnerability but has not yet provided an official fix or remediation details. The affected version is 4.0.251031.0, and the issue is resolved in version 5.1.260826.0.

The vulnerability allows an attacker with low privileges to bypass authorization controls, potentially leading to limited confidentiality impact. There is no impact on integrity or availability. The attack complexity is high, and no user interaction is required. The scope is changed, indicating some privilege escalation or access beyond the original authorization boundaries.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor has indicated the issue is resolved in version 5.1.260826.0, so upgrading to this or later versions is recommended once available. Until then, monitor vendor communications for official patches or workarounds.