{"id":"CVE-2026-115805","aliases":[],"cve":{"records":[{"id":"CVE-2026-115805","source":"rapid7","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-23T15:57:50.230Z","published":"2026-10-29T16:48:05.723Z","modified":"2026-10-30T17:18:24.014Z"}],"publishers":[{"name":"rapid7","role":"CNA","organizationId":"9974b330-7714-4307-a722-5648477acda7","modified":"2026-10-29T16:48:05.723Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T17:18:24.014Z"}],"references":[{"url":"https://docs.rapid7.com/insight/release-notes-2026-october/#rapid7-agent-insight-agent","tags":[],"source":"rapid7"}],"weaknesses":[{"id":"CWE-78","description":"CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')","source":"rapid7"}],"applicability":[{"source":"rapid7","statements":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rapid7:insight_agent:*:*:macos:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"4.1.4.43"},{"vulnerable":true,"criteria":"cpe:2.3:a:rapid7:insight_agent:*:*:linux:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"4.1.4.43"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-30T03:56:44.353245Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path","titleSource":"rapid7","descriptionSource":"rapid7","description":"Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.","score":7.8,"severity":"high","published":"2026-10-29T16:48:05.723Z","modified":"2026-10-30T17:18:24.014Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Rapid7","name":"Insight Agent","platforms":["MacOS","Linux"],"versions":[{"version":"0","status":"affected","lessThan":"4.1.4.43","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"rapid7","url":"https://www.cve.org/CVERecord?id=CVE-2026-115805"}],"remediation":[{"text":"Update Rapid7 Insight Agent to version 4.1.4.43 or later.","source":"rapid7","url":"https://www.cve.org/CVERecord?id=CVE-2026-115805"}],"references":["https://docs.rapid7.com/insight/release-notes-2026-october/#rapid7-agent-insight-agent"],"sources":[{"name":"CVE","id":"CVE-2026-115805","modified":"2026-10-30T17:18:24.014Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-115805"}],"assessments":[{"source":"rapid7","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8}],"sourceAffected":[],"observedAt":"2026-10-30T19:26:34.690Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T11:20:32.820Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T04:15:31.416Z","attemptedAt":"2026-10-30T04:15:31.416Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-30T04:15:34.448Z","attemptedAt":"2026-10-30T04:15:34.448Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T04:15:34.448Z","attemptedAt":"2026-10-30T04:15:34.448Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T04:15:34.448Z","attemptedAt":"2026-10-30T04:15:34.448Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-115805","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115805","modified":"2026-10-29T17:18:01.840","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-10-30T04:15:31.416Z"},{"source":"ENISA EUVD","id":"EUVD-2026-113221","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113221","modified":"Oct 29, 2026, 4:48:05 PM","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-10-30T04:15:34.448Z"},{"source":"GitHub Advisory Database","id":"GHSA-wg7x-99f3-xx6h","url":"https://github.com/advisories/GHSA-wg7x-99f3-xx6h","modified":"2026-10-29T18:31:15Z","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-10-30T04:15:34.448Z"}],"aiSummary":{"text":"Rapid7 Insight Agent versions before 4.1.4.43 on Linux and macOS may allow local users to gain elevated privileges via shell injection in the mcp.json configuration path, requiring existing local access. The weakness is due to improper handling of local filesystem paths. Exploitation depends on the Agent's inventory collection processing the crafted path.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:02:57.253Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-115805"}]}}