CVE-2026-8663: OS Command Injection in Rapid7 InsightConnect RPM Plugin
OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the repo, key, or name parameters due to insufficient input sanitization in shell command construction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8663?
The severity of CVE-2026-8663 is medium with a score of 6.
How do I fix CVE-2026-8663?
To fix CVE-2026-8663, ensure proper input validation and sanitization for the repo, key, and name parameters in the Rapid7 InsightConnect RPM Plugin.
What type of vulnerability is CVE-2026-8663?
CVE-2026-8663 is an OS Command Injection vulnerability in the Rapid7 InsightConnect RPM Plugin.
Who is affected by CVE-2026-8663?
Authenticated users of the Rapid7 InsightConnect RPM Plugin on Linux are affected by CVE-2026-8663.
What can attackers do in CVE-2026-8663?
Attackers can execute arbitrary OS commands on the affected system via insufficiently sanitized input in CVE-2026-8663.