What is the CVSS score of CVE-2026-8662?

CVE-2026-8662 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-8662?

Yes, a patch is available for CVE-2026-8662. Update the affected software to the latest version immediately.

InsightConnect Compression Plugin CVE-2026-8662

EUVD-2026-39162 MEDIUM

Path Traversal (CWE-22)

2026-06-25 rapid7

GHSA-x3f7-qmw7-g6pj

Path Traversal Insightconnect Compression Plugin Rapid7

4.3

CVSS 3.1 · NVD

Severity by source

Vendor (rapid7) PRIMARY

LOW

qualitative

NVD

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

vuln.today AI

3.3 LOW

PR:H confirmed by authenticated-attacker requirement; AC:H for crafted-input constraint; no confidentiality loss per description; I:L and A:L for file corruption only.

3.1 AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L

4.0 AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (rapid7).

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Severity Changed

Jun 29, 2026 - 19:37 NVD

LOW MEDIUM

CVSS changed

Jun 29, 2026 - 19:37 NVD

3.3 (LOW) 4.3 (MEDIUM)

Patch available

Jun 25, 2026 - 04:16 EUVD

Analysis Generated

Jun 25, 2026 - 03:20 vuln.today

CVE Published

Jun 25, 2026 - 01:51 cve.org

LOW 3.3

DescriptionNVD

Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker.

AnalysisAI

Path traversal in Rapid7 InsightConnect's Compression Plugin on Linux allows authenticated attackers with high privileges to write files to arbitrary paths on the underlying host via crafted archive filenames passed to the create_archive function. Impact is constrained to file corruption - the attacker can control write destination but not write content, preventing code execution via this vector alone. No public exploit code exists and no KEV listing is present; the low CVSS score of 3.3 reflects the high authentication bar and limited impact scope.

Technical ContextAI

The affected component is the Rapid7 InsightConnect Compression Plugin, identified by CPE cpe:2.3:a:rapid7:insightconnect_compression_plugin:*:*:*:*:*:*:*:*, running on Linux. InsightConnect is Rapid7's SOAR (Security Orchestration, Automation, and Response) platform; the Compression Plugin provides archive creation/extraction capabilities within automation workflows. CWE-22 (Path Traversal) describes the root cause: the create_archive function fails to sanitize or canonicalize filenames before constructing archive entries, allowing sequences such as '../../../etc/cron.d/malicious' to escape the intended archive root and place file entries at arbitrary filesystem paths upon extraction. This is a classic Zip Slip-style pattern where archive creation does not validate member paths against an allowed base directory.

RemediationAI

The primary remediation is to upgrade to a patched version of the Rapid7 InsightConnect Compression Plugin per the vendor advisory at https://extensions.rapid7.com/extension/compression. No specific patched version number was included in the available data - consult the advisory directly to confirm the fixed release. As a compensating control where upgrade is not immediately possible, restrict which InsightConnect users and roles have permission to invoke compression workflow steps, since exploitation requires high-privilege authenticated access. Additionally, audit and restrict write permissions of the InsightConnect service account on the Linux host to limit the blast radius of any path traversal attempt. Note that these controls reduce exposure but do not eliminate the underlying flaw.