Rapid7 Insight Agent EUVD-2026-113221

Exploitation requires an existing authenticated local account on a Linux or macOS host running Rapid7 Insight Agent prior to 4.1.4.43, and depends specifically on the Agent's inventory collection routine processing an attacker-crafted local filesystem path - the flaw is not reachable without that inventory-collection code path acting on the malicious path. Limiting factors: there is no remote or network attack surface (AV:L), the attacker must already hold local access (PR:L), and exploitation is bounded to hosts where the vulnerable Agent version is installed and actively running inventory collection; macOS and Linux are both in scope while Windows is not mentioned as affected.

This is a credible, well-qualified local privilege escalation rather than a high-CVSS-but-theoretical issue, though it is not an emergency. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 7.8) is internally consistent with the description: an attacker must already be an authenticated local user (PR:L), but once present the attack is low-complexity and yields full confidentiality, integrity and availability impact - consistent with escalation to the elevated context in which the Insight Agent runs. The vuln.today Decision label is 'this_week', which signals prioritized but not drop-everything remediation. No EPSS score, no CISA KEV listing, and no PoC reference are present in the input; absence of these is expected for a local EoP reported by the vendor itself (Rapid7) and should not be read as evidence of safety. The local-only attack vector is the dominant risk-limiting factor: there is no remote or network exposure, so exploitation presupposes the attacker has already obtained a foothold. The CWE-78 (OS Command Injection) classification and the 'Command Injection' tag are broadly consistent with 'improper handling of local filesystem paths' during inventory collection, but the description frames the flaw as path handling/privilege escalation, so the exact injection mechanism is not confirmed from the available sources. Net: a real priority for environments running the affected agent, driven by impact and ease-of-exploitation-once-local, not by widespread opportunistic exploitation.

An attacker who already has an unprivileged authenticated shell on a Linux or macOS host running Rapid7 Insight Agent plants or references a crafted filesystem path that the Agent's inventory collection process later reads and mishandles, causing privileged execution or privilege escalation. Because the Insight Agent runs with elevated privileges, successful exploitation elevates the attacker from a normal local user to that elevated context. No public exploit identified at time of analysis.