CVE-2026-9153: Arbitrary File Read in Rapid7 InsightConnect Sed Plugin
Published Jun 25, 2026
·Updated
Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.
Affected Software
3 affected components
Rapid7 InsightConnect Sed Plugin
All of the following
GNU Sed=4.2.2
Linux Linux kernel
Event History
Jun 25, 2026
CVE Published
via MITRE·12:33 AM
Data Sourced
via MITRE·12:33 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:16 AM
DescriptionSeverityWeaknessAffected Software
Jan 31, 58460
Event
via FIRST·10:06 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-9153?
CVE-2026-9153 has a medium severity level of 6.5.
2
How do I fix CVE-2026-9153?
To mitigate CVE-2026-9153, ensure that you validate and sanitize user inputs for the expression parameter in the Rapid7 InsightConnect Sed Plugin.
3
What type of vulnerability is CVE-2026-9153?
CVE-2026-9153 is an Arbitrary File Read vulnerability due to insufficient input validation.
4
Who is affected by CVE-2026-9153?
CVE-2026-9153 affects users of the Rapid7 InsightConnect Sed Plugin running on Linux.
5
What can an attacker achieve with CVE-2026-9153?
An authenticated attacker can read arbitrary files on the system via the expression parameter.