What is the CVSS score of CVE-2026-8592?

CVE-2026-8592 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.6%.

Which versions of Insightconnect Awk Plugin are affected by CVE-2026-8592?

Rapid7's InsightConnect AWK Plugin on Linux contains a critical remote command injection vulnerability enabling unauthenticated attackers to execute arbitrary OS commands and achieve complete system…. A patch is available.

How to fix or mitigate CVE-2026-8592?

Within 24 hours: Identify all InsightConnect deployments running AWK Plugin versions below 1.2.2 on Linux systems and assess exposure. Within 7 days: Deploy patch to upgrade AWK Plugin to version 1.2.2 or later across all affected systems. Within 30 days: Verify successful patching, review InsightConnect audit logs for suspicious activity on the plugin, and document remediation completion.

Insightconnect Awk Plugin CVE-2026-8592

EUVD-2026-39160 CRITICAL

OS Command Injection (CWE-78)

2026-06-25 rapid7

GHSA-xqrw-3c79-7qc7

Command Injection Insightconnect Awk Plugin Rapid7

9.8

CVSS 3.1 · NVD

Severity by source

Vendor (rapid7) PRIMARY

HIGH

qualitative

NVD

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-reachable, low-complexity command injection with full host impact, but reaching a SOAR plugin action realistically requires authenticated/automated orchestrator access, so PR:L rather than PR:N.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (rapid7).

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Jun 29, 2026 - 19:45 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 29, 2026 - 19:44 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 29, 2026 - 19:37 vuln.today

cvss_changed

Severity Changed

Jun 29, 2026 - 19:37 NVD

HIGH CRITICAL

CVSS changed

Jun 29, 2026 - 19:37 NVD

7.7 (HIGH) 9.8 (CRITICAL)

Patch available

Jun 25, 2026 - 03:01 EUVD

Analysis Generated

Jun 25, 2026 - 02:17 vuln.today

CVE Published

Jun 25, 2026 - 01:32 cve.org

HIGH 7.7

DescriptionNVD

OS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to unsafe shell command construction in the processing pipeline.

AnalysisAI

Remote OS command injection in Rapid7's InsightConnect AWK Plugin (versions below 1.2.2 on Linux) lets attackers run arbitrary operating-system commands through the process_string action's text or expression parameters, which are unsafely concatenated into a shell command. The CVSS 9.8 rating reflects full confidentiality, integrity, and availability loss with no privileges or user interaction required by the vector. There is no public exploit identified at time of analysis, EPSS is low (0.55%), and CISA SSVC marks exploitation as none, so risk today is potential rather than observed.