CVE-2026-5373 runZero Platform superuser privilege escalation
runZero Platform allows organization administrators to improperly promote accounts to superuser status, enabling privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-5373?
CVE-2026-5373 is a high-severity vulnerability in runZero Platform, published on 7 Apr 2026. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
An issue that allowed all-organization administrators to promote accounts to superuser status has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N (8.1 High). This issue was fixed in version 4.0.260202.0 of the runZero Platform.
Weakness: CWE-269
Which versions are affected by CVE-2026-5373?
It affects 1 product.
Products include Runzero Runzero Platform.
How do I fix CVE-2026-5373?
No fix has been published for CVE-2026-5373 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-5373 being exploited?
There is no known exploitation of CVE-2026-5373 in the wild and no public exploit code.
Other vulnerabilities in runZero Platform
Sources
Also known as GHSA-jc2w-m6fm-mc3g.