CVE-2026-115805: CVE-2026-115805: işletim sistemi komut enjeksiyonu

Açıklama (NVD)

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.

Özet bilgiler

CVSS v3.1

7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,17 (yüzdelik 6)

CWE

CWE-78

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• docs.rapid7.com
• CWE-78