Advisories · Technology
Rapid7 Insight Agent.
Every CVE that names Rapid7 Insight Agent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path
- Rapid7 Insight Agent
- Command injection
- CVSS 7.8 High
Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation
- Rapid7 Insight Agent
- CWE-427
- CVSS 7.8 High
Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation
- Rapid7 InsightVM
- Rapid7 Nexpose
- Privilege escalation
- CVSS 8.5 High
Local Privilege Escalation via OpenSSL configuration file in Insight Agent
- Rapid7 Insight Agent
- CWE-829
- CVSS 6.8 Medium
Insight Agent Private Key Information Disclosure via Inherited File Permissions
- Rapid7 Insight Agent
- Broken access control
- CVSS 6.6 Medium
Eval Injection in Rapid7 Insight Agent
- Rapid7 Insight Agent
- Code injection
- CVSS 6.8 Medium
Rapid7 Insight Agent Sensitive Key Exposed To Local Users
- Rapid7 Insight Agent
- CWE-1284
- CVSS 5.8 Medium
Rapid7 Insight Agent Directory Traversal
- Rapid7 Insight Agent
- Path traversal
- CVSS 4.0 Medium
Rapid7 Insight Agent Privilege Escalation
- Rapid7 Insight Agent
- CWE-264
- CVSS 4.0 Medium
Rapid7 Insight Agent Improper Access Control
- Rapid7 Insight Agent
- Broken access control
- CVSS 7.8 High
Rapid7 Insight Agent Privilege Escalation
- Rapid7 Insight Agent
- CWE-427
- CVSS 7.8 High
Uncontrolled search path in Rapid7 Insight Agent
- Rapid7 Insight Agent
- CWE-427