Rapid7 vulnerabilities, page 5

138 vulnerabilities

Known vulnerabilities in Rapid7 products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 45 products.

9.9CriticalCVE-2026-19072rapid7 · velociraptorVelociraptor Investigator reaches SuperUser via hunt EffectivePrincipalVelociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiled_collector_args" is an internal field, Velociraptor allowed the field to be set from a user API call. This allows another user who can schedule a hunt (minimal role of "investigator" ) to set the compiled VQL statements for the hunt bypassing any ACL checks that would normally be applied. This flaw can then be escalated to allow the "investigator" user to run arbitrary VQL statements as an administrator user on the Velociraptor server.EPSS0.40%9.9CriticalCVE-2026-19583rapid7 · velociraptorVelociraptor Required Permissions bypass by using client monitoring queriesVelociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command execution on endpoints, and so it requires the EXECVE permission to schedule. However, no such check was implemented for client monitoring artifacts. Additionally there was no requirement that client monitoring artifacts carry the CLIENT_EVENTS type. This allows any user who can schedule client monitoring artifacts to also schedule otherwise restricted artifacts (such as Linux.Sys.BashShell).EPSS0.60%8.8HighCVE-2026-9155gnu · sed +1 moreOS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation.EPSS1.60%6.5MediumCVE-2026-9153gnu · sed +1 moreArbitrary File Read in Rapid7 InsightConnect Sed PluginArbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.EPSS0.45%7.1HighCVE-2026-9154gnu · sed +1 moreArbitrary File Write in Rapid7 InsightConnect Sed PluginArbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter.EPSS0.41%7.8HighCVE-2026-14172rapid7 · insight_agent +2 moreRapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable InvocationRapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential (Scan Engine) or as root/SYSTEM (Insight Agent). Fixed in Scan Engine content 1.1.3935 and Insight Agent content component 0.0.245.0.EPSS0.16%7.2HighCVE-2026-4837rapid7 · insight_agentEval Injection in Rapid7 Insight AgentAn eval() injection vulnerability in the Rapid7 Insight Agent beaconing logic for Linux versions could theoretically allow an attacker to achieve remote code execution as root via a crafted beacon response. Because the Agent uses mutual TLS (mTLS) to verify commands from the Rapid7 Platform, it is unlikely that the eval() function could be exploited remotely without prior, highly privileged access to the backend platform.EPSS0.72%6.8MediumCVE-2026-4482rapid7 · insight_agentInsight Agent Private Key Information Disclosure via Inherited File PermissionsThe installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems (users have read and execute access). For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any locally authenticated standard user.EPSS0.10%6.2MediumCVE-2026-17535rapid7 · velociraptorVelociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS VolumesVelociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images. Typically Velociraptor's NTFS parser is used on live NTFS filesystems, limiting the opportunity of attackers corrupting the filesystem. However, in some applications (e.g.  dead disk forensics https://docs.velociraptor.app/docs/forensic/deaddisk/ ) Velociraptor may be used on untrusted NTFS image files.  If an attacker is able to inject maliciously corrupted NTFS Volumes they can cause a crash and a Denial of Service.EPSS0.16%8.5HighCVE-2026-7373rapid7 · metasploit proMetasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File LoadingRapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows host. When started the metasploitPostgreSQL service would start the postgres.exe child process which would in turn load an OpenSSL configuration file from a static location. This static location would be writable by a pre-existing "vagrant" user, if they already existed on the system. Metasploit does not create local accounts, an Administrator would need to create it. By planting a crafted openssl.cnf file an attacker can trick the high-privilege service into executing arbitrary commands. This effectively permits the unprivileged vagrant user to bypass security controls and achieve a full host compromise under the agent's SYSTEM level access.EPSS0.18%7.7HighCVE-2026-7573Gowww.velocidex.com/golang · velociraptor +2 moreGetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizationsAn authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the complete ACL policy (roles and permissions) for any user across all organizations by supplying targeted Name and Org parameters via a network request.EPSS0.30%5.5MediumCVE-2026-7572Gowww.velocidex.com/golang · velociraptor +2 moreVelociraptor EVTX Parser — Process Crash via Crafted .evtx FileAn off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local attacker to cause a Denial of Service (DoS) via a process crash by providing a specially crafted .evtx file to the parse_evtx VQL plugin.EPSS0.14%7.8HighCVE-2026-89325rapid7 · insight_agentRapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalationAn uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or below version 0.0.261.0 included a check that invoked the `code` command without a fully qualified path from a process running as SYSTEM. The command was resolved against the machine PATH environment variable at execution time. Where the machine PATH contained a directory writable by non-administrative users and ordered ahead of the legitimate Visual Studio Code installation, a local user could place an executable named `code` in that directory and cause the agent to execute it with SYSTEM privileges. The version range above refers to InsightVM assessment content versions, not Insight Agent versions. All Insight Agent versions were affected while running assessment content at or below 0.0.261.0. Assessment content is delivered to all Insight Agents via the Rapid7 Insight Platform independently of the Insight Agent version and is not customer-managed. This issue was resolved in assessment content version 0.0.269.0, which was made generally available on September 15, 2026. Remediation was deployed automatically and no customer action is required.EPSS0.13%8.7HighCVE-2026-18860rapid7 · velociraptorVelociraptor incorrect Org deletion permissions checkVelociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment. Users can have different permissions in each org. To manage Orgs, Velociraptor usually examines the ORG_ADMIN permission on the ROOT org. This issue results from the Velociraptor server allowing for the deletion of Orgs by incorrectly checking the ORG_ADMIN permission of callers within the calling ORG instead of the ROOT org. However, Org admins of child orgs were able to add this permission to their ACL token within their own org. This allows an administrator in a child org, which is not also an administrator in the ROOT org, to delete other orgs.EPSS0.44%7.3HighCVE-2026-18639rapid7 · velociraptorVelociraptor OIDC Authenticator susceptible to email spoofingWhen Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, some IdP allow users to change the email claim without verification. Some IdPs do not set the "email_verified" claim and do not actually verify the email. This allows a user to impersonate another user by setting their email address within the IdP, allowing account takeover.EPSS0.39%6.5MediumCVE-2026-18652rapid7 · velociraptorVelociraptor STACK Type Download Path Bypasses Denied Prefix CheckVelociraptor allows reading Stacked result sets from the GUI.  Velociraptor's multi-tenant design stores sub orgs within the datastore directory. The path requested by the GUI is not correctly checked against the prefix deny list, allowing result sets to read from denied prefixes. In particular, a user with read access to the root org can access result sets from child orgs.EPSS0.27%9.6CriticalCVE-2026-18972rapid7 · velociraptorVelociraptor authenticated identity-spoofing vulnerabilityAn authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-Metadata-USER\". This can lead to an account takeover attack from a user with low privileges to administrator.EPSS0.35%4.1MediumCVE-2026-18348rapid7 · velociraptorVelociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL pluginsMissing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.EPSS0.34%7.1HighCVE-2026-18640rapid7 · velociraptorVelociraptor directory traversal via the NewNotebook APIThe NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK_EDIT permission to write the notebook record outside the org's data store directory. The file written must have an extension of ".json.db" but can otherwise overwrite other metadata files (such as ACL records, hunts etc). This can corrupt these files and cause data corruption.EPSS0.43%6.8MediumCVE-2026-18636rapid7 · velociraptorVelociraptor VFSGetBuffer API path deny list bypassThe Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to access usually denied files. If the user has read permission in the ROOT org, this allows access to other orgs, in which the user may not have permission.EPSS0.40%