IA
Product
Insight Agent
10
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 1Low 1
Watch
Add Insight Agent to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-89325 | 7.8 | Sep 24 | Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation Affected: through 0.0.261.0 |
| CVE-2026-14172 | 7.8 | Jul 24 | Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation Affected: before 0.0.245.0 |
| CVE-2026-6482 | 7.8 | Apr 17 | Local Privilege Escalation via OpenSSL configuration file in Insight Agent Affected: before 4.1.0.2 |
| CVE-2022-0237 | 7.8 | Mar 17 | Rapid7 Insight Agent versions 3.1.2.38 and earlier suffer from a privilege escalation vulnerability, whereby an attacker can hijack the flow of execution due to an unquoted… Affected: through 3.1.2.38 |
| CVE-2021-4007 | 7.8 | Dec 14 | Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path Affected: 3.0.1 before 3.1.2.35 |
| CVE-2019-5629 | 7.8 | Jul 13 | Rapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to an uncontrolled DLL search path Affected: through 2.6.3 |
| CVE-2023-2273 | 7.5 | Apr 26 | Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby unsanitized input from a CLI argument flows into… Affected: before 3.3.0 |
| CVE-2026-4837 | 7.2 | Apr 8 | Eval Injection in Rapid7 Insight Agent Affected: before 4.1.0.2 |
Showing 8