What’s Vulnerable › Products
Rapid7 Insight Agent vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your Rapid7 Insight Agent version is affected
Latest Rapid7 Insight Agent vulnerabilities
- CVE-2026-115805 — Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path (CVSS 7.8)
- CVE-2026-89325 — Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation (CVSS 7.8)
- CVE-2026-14172 — Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation (CVSS 7.8)
- CVE-2026-6482 — Local Privilege Escalation via OpenSSL configuration file in Insight Agent (CVSS 7.8)
- CVE-2026-4482 — Insight Agent Private Key Information Disclosure via Inherited File Permissions (CVSS 5.5)
- CVE-2026-4837 — Eval Injection in Rapid7 Insight Agent (CVSS 7.2)
- CVE-2023-2273 — Rapid7 Insight Agent Directory Traversal (CVSS 7.5)
- CVE-2022-0237 — Rapid7 Insight Agent Privilege Escalation (CVSS 7.8)
- CVE-2021-4016 — Rapid7 Insight Agent Improper Access Control (CVSS 3.3)
- CVE-2021-4007 — Rapid7 Insight Agent Privilege Escalation (CVSS 7.8)
- CVE-2019-5629 — (CVSS 7.8)