CVE-2026-115805: Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path
Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Rapid7 Insight Agentto a version that resolves this vulnerability.Fixed in 4.1.4.43
Event History
Frequently Asked Questions
Who is exposed to this issue?
Linux and macOS systems running Rapid7 Insight Agent are exposed if an authenticated local user can create or influence a crafted filesystem path that the Agent processes during inventory collection. Remote-only attackers are not described as able to exploit it.
What does an attacker need to exploit the vulnerability?
The attacker needs existing authenticated local access and must get the Agent's inventory collection to process a crafted path. No user interaction is required once those conditions are met.
What is the likely impact of successful exploitation?
Successful exploitation may allow the local attacker to gain elevated privileges. The provided severity vector indicates high impact to confidentiality, integrity, and availability.