Elevated Privilege Vulnerability in Rapid7 Insight Agent for Linux and macOS

CVE-2026-115805

What is CVE-2026-115805?

The Rapid7 Insight Agent for Linux and macOS suffers from improper handling of local filesystem paths, which could enable authenticated local users to elevate their privileges. The vulnerability arises when the Agent's inventory collection attempts to process specially crafted paths. Exploiting this flaw necessitates that the attacker has local access to the affected system, presenting a potential risk of unauthorized actions and access within the operating environment. Prompt updates and monitoring are essential to mitigate the risks associated with this vulnerability.

References