Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-5373
Analyzed
More InfoOfficial Page
Source-44488dab-36db-4358-99f9-bc116477f914
View Known Exploited Vulnerability (KEV) details
Published At-07 Apr, 2026 | 15:17
Updated At-21 Apr, 2026 | 15:09

An issue that allowed all-organization administrators to promote accounts to superuser status has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N (8.1 High). This issue was fixed in version 4.0.260202.0 of the runZero Platform.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.18.1HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
Primary3.18.4HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Type: Secondary
Version: 3.1
Base score: 8.1
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
Type: Primary
Version: 3.1
Base score: 8.4
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CPE Matches
runzero
runzero
>>runzero_platform>>Versions before 4.0.260202.0(exclusive)
cpe:2.3:a:runzero:runzero_platform:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-269Secondary44488dab-36db-4358-99f9-bc116477f914
CWE ID: CWE-269
Type: Secondary
Source: 44488dab-36db-4358-99f9-bc116477f914
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://help.runzero.com/docs/release-notes/#40260202044488dab-36db-4358-99f9-bc116477f914
Release Notes
https://www.runzero.com/advisories/runzero-platform-su-privesc-cve-2026-5373/44488dab-36db-4358-99f9-bc116477f914
Vendor Advisory
Hyperlink: https://help.runzero.com/docs/release-notes/#402602020
Source: 44488dab-36db-4358-99f9-bc116477f914
Resource:
Release Notes
Hyperlink: https://www.runzero.com/advisories/runzero-platform-su-privesc-cve-2026-5373/
Source: 44488dab-36db-4358-99f9-bc116477f914
Resource:
Vendor Advisory
Change History
0Changes found
Details not found