runZero Platform MCP Endpoint Information Leak Vulnerability
Vulnerability
A vulnerability in the runZero Platform's MCP endpoints could have allowed authorized users to access records from organizations outside their own scope. This issue, categorized as CWE-863: Incorrect Authorization, has been resolved in version 4.0.260206.0.
Impact
Exploitation of this vulnerability could have led to unauthorized access to confidential asset information, potentially allowing for targeted attacks against the affected organization.
Remediation
Users can update to runZero Platform version 4.0.260206.0 to address this vulnerability.
Added: Apr 7, 2026, 5:13 PM
Updated: Apr 7, 2026, 5:13 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.8remediation
0.0relevance
5.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.