Skip to contentRapid7 Insight Agent vulnerabilities
- rapid7 insight agentRapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration PathCVE-2026-1158057.8 High
- rapid7 insight agentRapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalationCVE-2026-893257.8 High
- rapid7 insight agent, insightvm, nexpose +2 moreRapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable InvocationCVE-2026-141727.8 High
- rapid7 insight agentLocal Privilege Escalation via OpenSSL configuration file in Insight AgentCVE-2026-64828.5 High
- rapid7 insight agentInsight Agent Private Key Information Disclosure via Inherited File PermissionsCVE-2026-44826.8 Medium
- rapid7 insight agentEval Injection in Rapid7 Insight AgentCVE-2026-48376.6 Medium
- rapid7 insight agent, insightvm +1 moreRapid7 Insight Agent Sensitive Key Exposed To Local UsersCVE-2024-31856.8 Medium
- rapid7 insight agentRapid7 Insight Agent Directory TraversalCVE-2023-22735.8 Medium
- rapid7 insight agentRapid7 Insight Agent Privilege EscalationCVE-2022-02374.0 Medium
- rapid7 insight agentRapid7 Insight Agent Improper Access ControlCVE-2021-40164.0 Medium
- rapid7 insight agentRapid7 Insight Agent Privilege EscalationCVE-2021-40077.8 High
- rapid7 insight agentRapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to...CVE-2019-56297.8 High