PT-2026-30872 · Unknown · Runzero Platform

Runzero · Published 2026-04-07 · Updated 2026-04-08 · CVE-2026-5376

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions runZero Platform versions prior to 4.0.260203.0

Description A flaw exists that could prevent session inactivity timeouts from triggering due to automatic page reloading. This is due to insufficient control of resources after expiration or release.

Recommendations Update to version 4.0.260203.0 or later.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2026-5376

Affected Products

Runzero Platform

References · 5

• https://runzero.com/advisories/runzero-platform-session-timeout-failure-cve-2026-5376 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5376 · Security Note
• https://twitter.com/infoflowcloud/status/2041714173264978258 · Twitter Post
• https://twitter.com/CVEnew/status/2041711911046410564 · Twitter Post
• https://help.runzero.com/docs/release-notes/#402602030 · Note