Local Privilege Escalation in Rapid7 Insight Agent for Windows

CVE-2026-6482

What is CVE-2026-6482?

The Rapid7 Insight Agent, specifically versions greater than 4.1.0.2, contains a vulnerability that allows local privilege escalation on Windows systems. When started, the agent service tries to load an OpenSSL configuration file from a non-existent directory which is writable by standard users. This vulnerability can be exploited by an attacker who creates a malicious 'openssl.cnf' file, tricking the high-privilege service into executing arbitrary commands. As a result, unprivileged users can bypass existing security measures and obtain complete control of the host under the agent's SYSTEM-level permissions.

References