CVE-2026-8592: OS Command Injection in Rapid7 InsightConnect AWK Plugin
Published Jun 25, 2026
·Updated
OS Command Injection vulnerability in the processstring action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to unsafe shell command construction in the processing pipeline.
Affected Software
3 affected components
Rapid7 InsightConnect AWK Plugin
All of the following
Rapid7 Insightconnect Awk Rapid7<1.2.2
Linux Linux kernel
Event History
Jun 25, 2026
CVE Published
via MITRE·01:32 AM
Data Sourced
via MITRE·01:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 AM
DescriptionSeverityWeaknessAffected Software
Jul 25, 58465
Event
via FIRST·03:36 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-8592?
CVE-2026-8592 has a high severity rating of 7.7.
2
What types of vulnerabilities does CVE-2026-8592 involve?
CVE-2026-8592 involves OS Command Injection vulnerabilities.
3
How can I mitigate CVE-2026-8592?
To mitigate CVE-2026-8592, update the Rapid7 InsightConnect AWK Plugin to the latest version available.
4
What does CVE-2026-8592 allow an attacker to do?
CVE-2026-8592 allows remote attackers to execute arbitrary OS commands on affected systems.
5
In which software application is CVE-2026-8592 found?
CVE-2026-8592 is found in the Rapid7 InsightConnect AWK Plugin.