CVE-2026-5381

An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N (2.2 Low). This issue was fixed in version 4.0.260205.0 of the runZero Platform.

• CWE-863

• https://help.runzero.com/docs/release-notes/#402602050Release Notes
• https://www.runzero.com/advisories/runzero-platform-task-infoleak-cve-2026-5381/Vendor Advisory

Published

Apr 7, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5380An issue that could allow an authorized user to view the cle…5.3
• CVE-2026-53805NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an un…9.8
• CVE-2026-53806OpenClaw before 2026.5.12 contains a shell option parsing vu…8.8
• CVE-2026-53807OpenClaw before 2026.5.6 contains an authorization bypass vu…8.8
• CVE-2026-53808OpenClaw before 2026.5.6 contains an approval policy bypass …6.5
• CVE-2026-53809OpenClaw before 2026.4.25 contains a policy bypass vulnerabi…4.8
• CVE-2026-53810OpenClaw before 2026.5.18 contains a code execution vulnerab…8.8
• CVE-2026-53811OpenClaw before 2026.5.7 contains a privilege escalation vul…8.8
• CVE-2026-53812OpenClaw before 2026.5.18 contains a server-side request for…7.7
• CVE-2026-53813OpenClaw before 2026.4.25 contains a path traversal vulnerab…7.8
• CVE-2026-53814OpenClaw before 2026.5.20 contains a privilege escalation vu…8.7
• CVE-2026-53815OpenClaw before 2026.5.19 contains an authorization bypass v…7.1