An improper privilege management flaw in the runZero Platform allows any all‑organization administrator to promote an account to superuser status. This defect, classified as CWE‑269, carries a CVSS v3.1 base score of 8.1, signifying high severity. The vulnerability enables an attacker with administrative credentials to gain full platform control, potentially exposing confidential data, configuration settings, and other privileged functionalities, and compromising overall system integrity.

The runZero Platform is affected. Users running version 4.0 or earlier, specifically those on versions prior to the fixed build 4.0.260202.0, are vulnerable. The issue applies to all organization‑wide administrators regardless of deployment context, whether on‑premises or hosted in the cloud.

The CVSS vector indicates that the attack can be performed remotely and with low effort, but requires high privileges from an administrator. EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog, yet its high impact and broad potential exposure make it a significant risk. Once exploited, the attacker could compromise the entire platform, exposing sensitive information and enabling further internal attacks.