Rapid7 Insight Agent CVE-2026-89325

Requires an authenticated low-privileged local user on a Windows endpoint running the Rapid7 Insight Agent while it executes InsightVM assessment content at or below version 0.0.261.0. The critical enabling misconfiguration is that the machine (system) PATH environment variable must contain a directory writable by non-administrative users AND ordered ahead of the legitimate Visual Studio Code installation, allowing a planted code binary to win path resolution inside the SYSTEM process. Exploitation is limited by: local-only access (no remote vector), the requirement for that specific writable-and-precedent PATH directory, and the fact that the vulnerable assessment content is Rapid7-delivered and was auto-remediated to 0.0.269.0 on 2026-09-15 without customer action, so unpatched windows of exposure are transient.

This is a local privilege-escalation-to-code-execution flaw rated CVSS 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), self-reported by the vendor Rapid7 (cve@rapid7.com). The CVSS vector is internally consistent with the CWE-427 uncontrolled search path description: AV:L reflects that a local, already-authenticated low-privileged user (PR:L) is required, while C:H/I:H/A:H reflects full SYSTEM-level compromise once triggered. No EPSS score, KEV listing, or POC was provided; exploitation status is therefore no public exploit identified at time of analysis. Two factors sharply lower real-world urgency: (1) exploitation is not remote and requires pre-existing local access, and (2) the vulnerable component is vendor-managed assessment content that Rapid7 already remediated automatically (content 0.0.269.0, GA 2026-09-15) with no customer action - so most fleets are patched independently of Insight Agent version. The one caveat to flag: successful exploitation also depends on a specific environmental precondition (a non-admin-writable directory ordered ahead of the legitimate VS Code install in the machine PATH), which the AC:L rating arguably understates; on well-hardened hosts this condition may not exist. No signals conflict, but the practical priority is moderate-to-low given local-only access and automatic remediation.

A low-privileged local user on a Windows host running the Rapid7 Insight Agent identifies a directory in the machine PATH that is writable by non-administrators and ordered ahead of the real Visual Studio Code install. They plant a malicious executable named code there; when the SYSTEM-level agent runs the vulnerable InsightVM assessment check (content ≤0.0.261.0), it resolves and executes the planted binary as SYSTEM. No public exploit code was provided, and the attack requires local access plus a pre-existing PATH misconfiguration.