An authorization flaw allows features that normally belong to one organizational scope to be accessed by agents belonging to another scope. The flaw permits certificate information to be viewed by MCP agents that are not originally authorized. This results in a modest loss of confidentiality and is classified as CWE‑863.

The vulnerability exists in the runZero Platform before version 4.0.260203.0. Only installations using an earlier release are affected. The platform version can be verified against the release notes linked in the advisory.

The CVSS score is 3.0, indicating low severity. The lack of an EPSS score and absence from the CISA KEV list suggest limited public exploitation. The attack vector is likely through an MCP agent that gains elevated permission within the platform; it requires that the attacker already has some operational presence in the system. The risk level remains low, but it could allow insufficient privilege escalation and disclosure of sensitive onboarding certificates.