CVE-2026-14172: CWE-250 Execution with Unnecessary Privileges in Rapid7 InsightVM
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential (Scan Engine) or as root/SYSTEM (Insight Agent). Fixed in Scan Engine content 1.1.3935 and Insight Agent content component 0.0.245.0.
AI Analysis
Technical Summary
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessments without verifying file ownership. This improper validation enables a local low-privileged user to escalate privileges by running code as the scan credential or as root/SYSTEM. The vulnerability is identified as CWE-250 (Execution with Unnecessary Privileges). Fixes have been released in specific content versions for the Scan Engine and Insight Agent components.
Potential Impact
A local low-privileged user can execute arbitrary code with elevated privileges—either as the scan credential used by the Scan Engine or as root/SYSTEM in the Insight Agent context. This can lead to full system compromise, including confidentiality, integrity, and availability impacts.
Mitigation Recommendations
Fixes are available in Scan Engine content version 1.1.3935 and Insight Agent content component version 0.0.245.0. Users should update to these versions or later to remediate the vulnerability. No additional mitigation guidance is provided or required beyond applying these updates.
CVE-2026-14172: CWE-250 Execution with Unnecessary Privileges in Rapid7 InsightVM
Description
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential (Scan Engine) or as root/SYSTEM (Insight Agent). Fixed in Scan Engine content 1.1.3935 and Insight Agent content component 0.0.245.0.
CVSS v3.1
Score 7.8high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessments without verifying file ownership. This improper validation enables a local low-privileged user to escalate privileges by running code as the scan credential or as root/SYSTEM. The vulnerability is identified as CWE-250 (Execution with Unnecessary Privileges). Fixes have been released in specific content versions for the Scan Engine and Insight Agent components.
Potential Impact
A local low-privileged user can execute arbitrary code with elevated privileges—either as the scan credential used by the Scan Engine or as root/SYSTEM in the Insight Agent context. This can lead to full system compromise, including confidentiality, integrity, and availability impacts.
Mitigation Recommendations
Fixes are available in Scan Engine content version 1.1.3935 and Insight Agent content component version 0.0.245.0. Users should update to these versions or later to remediate the vulnerability. No additional mitigation guidance is provided or required beyond applying these updates.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- rapid7
- Date Reserved
- 2026-06-30T06:49:55.764Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a6308729c2644c7f873e5e5
Added to database: 07/24/2026, 06:38:42 UTC
Last enriched: 07/31/2026, 15:03:02 UTC
Last updated: 09/07/2026, 22:52:09 UTC
Views: 119
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.