Description
Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.
Published: 2026-10-29
Score: 7.8 High
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

Update Rapid7 Insight Agent to version 4.1.4.43 or later.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 29 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Description Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.
Title Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path
First Time appeared Rapid7
Rapid7 insight Agent
Weaknesses CWE-78
CPEs cpe:2.3:a:rapid7:insight_agent:*:*:linux:*:*:*:*:*
cpe:2.3:a:rapid7:insight_agent:*:*:macos:*:*:*:*:*
Vendors & Products Rapid7
Rapid7 insight Agent
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Rapid7 Insight Agent
cve-icon MITRE

Status: PUBLISHED

Assigner: rapid7

Published:

Updated: 2026-10-29T16:48:05.723Z

Reserved: 2026-10-23T15:57:50.230Z

Link: CVE-2026-115805

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-29T17:18:01.840

Modified: 2026-10-29T17:18:01.840

Link: CVE-2026-115805

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-29T18:30:14Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')