🔐 CVE Alert

CVE-2026-14172

HIGH 7.8

Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation

CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th

Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential (Scan Engine) or as root/SYSTEM (Insight Agent). Fixed in Scan Engine content 1.1.3935 and Insight Agent content component 0.0.245.0.

CWE CWE-250
Vendor rapid7
Product insightvm
Published Jul 24, 2026
Last Updated Jul 24, 2026
Stay Ahead of the Next One

Get instant alerts for rapid7 insightvm

Be the first to know when new high vulnerabilities affecting rapid7 insightvm are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Rapid7 / InsightVM
0 < 1.1.3935
Rapid7 / Nexpose
0 < 1.1.3935
Rapid7 / Insight Agent
0 < 0.0.245.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
docs.rapid7.com: https://docs.rapid7.com/insight/release-notes-2026-july/#vulnerability-management-insightvm docs.rapid7.com: https://docs.rapid7.com/insight/release-notes-2026-july/#rapid7-agent-insight-agent

Credits

Paul Miseiko of Rapid7 Patrick Fitzsimons of Rapid7