Rapid7 Insight Agent vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20211
3. 20222
4. 20231
5. 20241
6. 20266

Newest CVEs

• CVE-2026-115805

  Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path

  Rapid7 · Insight Agent

  High7.8
• CVE-2026-89325

  Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation

  Rapid7 · Insight Agent

  High7.8
• CVE-2026-14172

  Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation

  Rapid7 · InsightVM

  High7.8
• CVE-2026-6482

  Local Privilege Escalation via OpenSSL configuration file in Insight Agent

  Rapid7 · Insight Agent

  High8.5
• CVE-2026-4482

  Insight Agent Private Key Information Disclosure via Inherited File Permissions

  Rapid7 · Insight Agent

  Medium6.8
• CVE-2026-4837

  Eval Injection in Rapid7 Insight Agent

  Rapid7 · Insight Agent

  Medium6.6
• CVE-2024-3185

  Rapid7 Insight Agent Sensitive Key Exposed To Local Users

  Rapid7 · Insight Agent

  Medium6.8
• CVE-2023-2273

  Rapid7 Insight Agent Directory Traversal

  Rapid7 · Insight Agent

  Medium5.8
• CVE-2022-0237

  Rapid7 Insight Agent Privilege Escalation

  Rapid7 · Insight Agent

  Medium4.0
• CVE-2021-4016

  Rapid7 Insight Agent Improper Access Control

  Rapid7 · Insight Agent

  Medium4.0