CVE-2026-6482 Details
Description
The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host. Upon startup the agent service attempts to load an OpenSSL configuration file from a non-existent directory that is writable by standard users. By planting a crafted openssl.cnf file an attacker can trick the high-privilege service into executing arbitrary commands. This effectively permits an unprivileged user to bypass security controls and achieve a full host compromise under the agent’s SYSTEM level access.
A local privilege escalation vulnerability has been identified in the Rapid7 Insight Agent, specifically in versions greater than 4.1.0.2. This vulnerability allows users to gain SYSTEM-level control on a Windows host. The issue arises because the agent service, upon startup, tries to load an OpenSSL configuration file from a non-existent directory that standard users can write to. By placing a crafted openssl.cnf file in this location, an attacker can manipulate the high-privilege service into executing arbitrary commands. This exploitation enables an unprivileged user to bypass security measures and achieve full control of the host with the agent's SYSTEM-level access.
Users can update to Rapid7 Insight Agent version 4.1.0.2 or later, which addresses this vulnerability by removing the agent's attempt to load an OpenSSL configuration file from the exploitable directory. Instructions for updating the Rapid7 Insight Agent can be found in the Rapid7 documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.rapid7.com/insight/release-notes-2026-april/#improvements-and-fixes | [email protected] | Release Notes |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-829 | Inclusion of Functionality from Untrusted Control Sphere | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| rapid7 insight agent | < 4.1.0.2 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 28, 2026 | Initial Analysis | [email protected] |
| Apr 17, 2026 | New CVE Received | [email protected] |