CVE-2026-14172: CWE-250 Execution with Unnecessary Privileges in Rapid7 InsightVM
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential (Scan Engine) or as root/SYSTEM (Insight Agent). Fixed in Scan Engine content 1.1.3935 and Insight Agent content component 0.0.245.0.
AI Analysis
Technical Summary
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessments without verifying the ownership of these files. This flaw permits a local user with low privileges to run arbitrary code with the privileges of the scan credential or with root/SYSTEM privileges, depending on the component. The vulnerability is identified as CWE-250 (Execution with Unnecessary Privileges). Fixes have been released in specific content versions of the Scan Engine and Insight Agent components.
Potential Impact
A local low-privileged user can escalate privileges by executing arbitrary code as the scan credential or as root/SYSTEM. This can lead to full system compromise, including confidentiality, integrity, and availability impacts as indicated by the CVSS vector (Confidentiality: High, Integrity: High, Availability: High).
Mitigation Recommendations
Fixes are available in Scan Engine content 1.1.3935 and Insight Agent content component 0.0.245.0. Users should update to these versions or later to remediate the vulnerability. No additional mitigation steps are indicated.
CVE-2026-14172: CWE-250 Execution with Unnecessary Privileges in Rapid7 InsightVM
Description
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential (Scan Engine) or as root/SYSTEM (Insight Agent). Fixed in Scan Engine content 1.1.3935 and Insight Agent content component 0.0.245.0.
CVSS v3.1
Score 7.8high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessments without verifying the ownership of these files. This flaw permits a local user with low privileges to run arbitrary code with the privileges of the scan credential or with root/SYSTEM privileges, depending on the component. The vulnerability is identified as CWE-250 (Execution with Unnecessary Privileges). Fixes have been released in specific content versions of the Scan Engine and Insight Agent components.
Potential Impact
A local low-privileged user can escalate privileges by executing arbitrary code as the scan credential or as root/SYSTEM. This can lead to full system compromise, including confidentiality, integrity, and availability impacts as indicated by the CVSS vector (Confidentiality: High, Integrity: High, Availability: High).
Mitigation Recommendations
Fixes are available in Scan Engine content 1.1.3935 and Insight Agent content component 0.0.245.0. Users should update to these versions or later to remediate the vulnerability. No additional mitigation steps are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- rapid7
- Date Reserved
- 2026-06-30T06:49:55.764Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a6308729c2644c7f873e5e5
Added to database: 07/24/2026, 06:38:42 UTC
Last enriched: 07/24/2026, 06:51:58 UTC
Last updated: 07/25/2026, 02:18:51 UTC
Views: 22
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.