Rapid7 Insight Agent

• CVE-2026-115805 High 7.8 Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path 0.2%
• CVE-2026-89325 High 7.8 Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation 0.1%
• CVE-2026-14172 High 7.8 Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation 0.2%
• CVE-2026-6482 High 8.5 Local Privilege Escalation via OpenSSL configuration file in Insight Agent 0.2%
• CVE-2026-4482 Medium 6.8 Insight Agent Private Key Information Disclosure via Inherited File Permissions <0.1%
• CVE-2026-4837 Medium 6.6 Eval Injection in Rapid7 Insight Agent 0.4%
• CVE-2024-3185 Medium 6.8 Rapid7 Insight Agent Sensitive Key Exposed To Local Users 0.2%
• CVE-2023-2273 Medium 5.8 Rapid7 Insight Agent Directory Traversal 0.7%
• CVE-2022-0237 Medium 4.0 Rapid7 Insight Agent Privilege Escalation 0.5%
• CVE-2021-4016 Medium 4.0 Rapid7 Insight Agent Improper Access Control 0.2%
• CVE-2021-4007 High 7.8 Rapid7 Insight Agent Privilege Escalation 0.3%