Rapid7 Insight Agent vulnerabilities
12 published CVEs name Rapid7 Insight Agent among the affected products.
- 12Published CVEs12 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115805
Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path
Rapid7 · Insight Agent
High7.8 - CVE-2026-89325
Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation
Rapid7 · Insight Agent
High7.8 - CVE-2026-14172
Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation
Rapid7 · InsightVM
High7.8 - CVE-2026-6482
Local Privilege Escalation via OpenSSL configuration file in Insight Agent
Rapid7 · Insight Agent
High8.5 - CVE-2026-4482
Insight Agent Private Key Information Disclosure via Inherited File Permissions
Rapid7 · Insight Agent
Medium6.8 - CVE-2026-4837
Eval Injection in Rapid7 Insight Agent
Rapid7 · Insight Agent
Medium6.6 - CVE-2024-3185
Rapid7 Insight Agent Sensitive Key Exposed To Local Users
Rapid7 · Insight Agent
Medium6.8 - CVE-2023-2273
Rapid7 Insight Agent Directory Traversal
Rapid7 · Insight Agent
Medium5.8 - CVE-2022-0237
Rapid7 Insight Agent Privilege Escalation
Rapid7 · Insight Agent
Medium4.0 - CVE-2021-4016
Rapid7 Insight Agent Improper Access Control
Rapid7 · Insight Agent
Medium4.0