CVE-2026-81846 - runZero MCP 'Findings summaries' Data Leak
Brief
CVE ID : CVE-2026-81846
Published : Sept. 1, 2026, 7:04 p. m.
- 12 minutes ago
Description : An authorization bypass in the runZero Platform MCP service has been resolved in version 5.
- 260826.
- This issue is an instance of
CWE-639:
Authorization Bypass Through User-Controlled Key and has an estimated CVSS score of CVSS:3. 1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N (3. 5 Low).
Severity: 3.5
- LOW