CVE-2026-4482

CVE-2026-4482 involves installer certificate files in the …/bootstrap/common/ssl folder where Windows permissions are not restricted; specifically, client.key is readable/executable by any locally authenticated standard user. The impact is exposure of agent identity material to unprivileged local...

CVE-2023-2273

CVE-2023-2273 affects Rapid7 Insight Agent (token handler) versions ≤ 3.2.6. The issue is a Directory Traversal where an unsanitized CLI argument flows into io.ioutil.WriteFile and is used as a path, enabling an attacker to write arbitrary files. Remediation: upgrade to version 3.3.0, which adds ...

CVE-2021-4016

CVE-2021-4016 affects Rapid7 Insight Agent prior to 3.1.3, where improper access control allows local users to read the snapshot directory and copy files (e.g., asset_info.json, file_info.json), causing confidentiality loss. Root cause is lack of proper privilege restrictions for files in the sna...

CVE-2026-4837

CVE-2026-4837 concerns an eval() injection in the beaconing logic of the Rapid7 Insight Agent for Linux. Reported across multiple sources, it could theoretically allow remote code execution as root via a crafted beacon response. The internal mechanism relies on mutual TLS (mTLS) to verify command...

CVE-2026-6482

The CVE-2026-6482 entry describes a Local Privilege Escalation in Rapid7 Insight Agent (Windows) versions > 4.1.0.2. At startup, the high-privilege agent service loads an OpenSSL configuration file from a directory writable by standard users; a crafted openssl.cnf can cause the service to exec...