---
id: CVE-2026-115805
title: >-
  Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in
  mcp.json Configuration Path
summary: >-
  Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux
  and macOS may allow authenticated local users to gain elevated privileges.
  Exploitation requires existing local access and depends on the Agent's
  inventory coll…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-78
vendor: Rapid7
product: Insight Agent
affected:
  - insight_agent < 4.1.4.43
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-30T03:56:44.353245Z'
published: '2026-10-29'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T17:18:24.014Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-115805'
references:
  - url: >-
      https://docs.rapid7.com/insight/release-notes-2026-october/#rapid7-agent-insight-agent
tags:
  - cve.org
epss: 0.00167
epssPercentile: 0.06057
ingestedAt: '2026-11-05T16:24:31.170Z'
---

## Overview

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.

## Affected

- `insight_agent < 4.1.4.43`

## Remediation

Update Rapid7 Insight Agent to version 4.1.4.43 or later.