How many rapid7 Insight Agent CVEs are in CISA KEV?

None of rapid7 Insight Agent's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of rapid7 Insight Agent are affected?

21 distinct rapid7 Insight Agent versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in rapid7 Insight Agent CVEs?

rapid7 Insight Agent's CVEs most often map to these CWE weakness types: CWE-427 (Uncontrolled Search Path Element), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-250 (Execution with Unnecessary Privileges), CWE-264.

What is the average severity of rapid7 Insight Agent CVEs?

The average CVSS base score across rapid7 Insight Agent's scored CVEs is 7.3.

RadicalNotion.AI

Log in Create an account

rapid7

11 CVEs

rapid7 Insight Agent Vulnerabilities

Name: rapid7 Insight Agent vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Insight Agent by rapid7.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

7.3

Avg CVSS

2019–2026

Last updated September 24, 2026

Overview

rapid7 Insight Agent has 11 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.3. Affected platforms include linux, macos, windows.

Severity and exploitation

How the CVSS severity of rapid7 Insight Agent's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High8

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of rapid7 Insight Agent's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of rapid7 Insight Agent's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every rapid7 Insight Agent version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 4.1.0.23 CVEs
>= 4.1.0.22 CVEs
< 0.0.245.01 CVE
< 3.1.31 CVE
< 3.3.01 CVE
<= 0.0.261.01 CVE
<= 2.6.31 CVE
<= 2024-04-03T12:00:00:000Z1 CVE
<= 3.1.2.381 CVE
>= 2.6.3 and prior1 CVE
3.0.1 <= v < 3.0.1*1 CVE
3.0.1 <= v < 3.1.2.351 CVE
3.1.2.34 <= v <= 3.1.2.341 CVE
3.1.2.38 <= v <= 3.1.2.381 CVE
3.1.3 <= v < 3.1.31 CVE

Fixed in

4.1.0.23 CVEs
0.0.245.01 CVE
3.0.1*1 CVE
3.1.2.351 CVE
3.1.31 CVE
3.3.01 CVE

Find a version

11 CVEs

Sort

Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation
CVE-2026-89325CWE-427
High · CVSS 7.8
EPSS 0.1% (2th pct)2026-09-24
Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation
CVE-2026-14172
Patch
CWE-250
High · CVSS 7.8
EPSS 0.2% (4th pct)2026-07-24
Local Privilege Escalation via OpenSSL configuration file in Insight Agent
CVE-2026-6482
Patch
CWE-829
High · CVSS 8.5
EPSS 0.2% (8th pct)2026-04-17
Insight Agent Private Key Information Disclosure via Inherited File Permissions
CVE-2026-4482
Patch
CWE-732
Medium · CVSS 6.8
EPSS 0.1% (1th pct)2026-04-10
Eval Injection in Rapid7 Insight Agent
CVE-2026-4837
Patch
CWE-95
High · CVSS 7.2
EPSS 0.7% (53th pct)2026-04-08
Medium vulnerability · 2024-04-23
CVE-2024-3185
Public exploit
Patch
CWE-1284
Medium · CVSS 6.8
EPSS 0.2% (6th pct)2024-04-23
High vulnerability · 2023-04-26
CVE-2023-2273
Patch
CWE-22
High · CVSS 7.5
EPSS 0.7% (53th pct)2023-04-26
High vulnerability · 2022-03-17
CVE-2022-0237
Public exploit
CWE-264
High · CVSS 7.8
EPSS 0.5% (40th pct)2022-03-17
Medium vulnerability · 2022-01-21
CVE-2021-4016
Patch
CWE-284
Medium · CVSS 4.0
EPSS 0.2% (12th pct)2022-01-21
Rapid7 Insight Agent Privilege Escalation
CVE-2021-4007
Patch
CWE-427
High · CVSS 7.8
EPSS 0.3% (24th pct)2021-12-14
High vulnerability · 2019-07-13
CVE-2019-5629
Public exploit
Patch
CWE-427
High · CVSS 7.8
EPSS 0.9% (60th pct)2019-07-13

Common weakness types

The CWE weakness categories most often found in rapid7 Insight Agent CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many rapid7 Insight Agent CVEs were published each year.

2019

1

2021

1

2022

2

2023

1

2024

1

2026

5

Other rapid7 products

Browse vulnerabilities for other products by rapid7.

metasploit-framework64 CVEs Velociraptor44 CVEs nexpose22 CVEs metasploit17 CVEs insightvm11 CVEs Metasploit Framework8 CVEs appspider pro6 CVEs Metasploit Pro6 CVEs

All rapid7 vulnerabilities

Frequently asked questions

Common questions about rapid7 Insight Agent vulnerabilities.

How many CVEs does rapid7 Insight Agent have?: rapid7 Insight Agent has 11 published CVE records since 2019.
How many rapid7 Insight Agent CVEs are in CISA KEV?: None of rapid7 Insight Agent's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for rapid7 Insight Agent vulnerabilities?: Yes — 3 of rapid7 Insight Agent's CVEs have a known public exploit.
Which versions of rapid7 Insight Agent are affected?: 21 distinct rapid7 Insight Agent versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in rapid7 Insight Agent CVEs?: rapid7 Insight Agent's CVEs most often map to these CWE weakness types: CWE-427 (Uncontrolled Search Path Element), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-250 (Execution with Unnecessary Privileges), CWE-264.
What is the average severity of rapid7 Insight Agent CVEs?: The average CVSS base score across rapid7 Insight Agent's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track rapid7 Insight Agent vulnerabilities

Get an alert for each new rapid7 Insight Agent CVE, with AI-written analysis and remediation steps.

Create an account See pricing