CVE-2026-115805
Last modified
CVE-2026-115805 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Rapid7 | Insight Agent | < 4.1.4.43 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-115805?
How severe is CVE-2026-115805?
How do I fix CVE-2026-115805?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-11580The Kali Forms — Contact Form & Drag-and-Drop Builder WordPr…5.5
- CVE-2026-115800A vulnerability was identified in UbiquitousLearning mllm up…5.3
- CVE-2026-115801A security flaw has been discovered in Kakao khaiii up to 0.…5.3
- CVE-2026-115802A weakness has been identified in InternScience InternAgent …4.3
- CVE-2026-115803A flaw has been found in Scada-LTS 2.8.0. Affected by this v…4.3
- CVE-2026-115804HashiCorp Consul and Consul Enterprise are vulnerable to an …6.4
- CVE-2026-115806The Prime Mover – Backup and Migration plugin for WordPress …9.8
- CVE-2026-115807The User Profile Builder – Beautiful User Registration Forms…7.1
- CVE-2026-11581The Kali Forms — Contact Form & Drag-and-Drop Builder WordPr…5.9
- CVE-2026-115810Tandoor Recipes before 2.7.0 contains a server-side request …7.7
- CVE-2026-115811The Strong Testimonials plugin for WordPress is vulnerable t…7.2
- CVE-2026-115812Relative path traversal during model archive extraction in A…9.8
Are you affected by CVE-2026-115805?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST