The Rapid7 Insight Agent (versions > 4.1.0.2) contains a local privilege escalation vulnerability (CWE-829) due to the agent service loading an OpenSSL configuration file from a directory that does not exist but is writable by standard users. By planting a malicious openssl.cnf file in this directory, an attacker can cause the agent service, which runs with SYSTEM privileges, to execute arbitrary commands. This results in an unprivileged user gaining SYSTEM level control over the Windows host.

Successful exploitation of this vulnerability allows an unprivileged local user to escalate their privileges to SYSTEM level on the affected Windows host. This effectively grants full control over the system, enabling bypass of security controls and potential full host compromise. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented in the provided data. Until a patch is available, restrict write permissions to the directory path where the OpenSSL configuration file is loaded, if possible, to prevent unprivileged users from planting malicious files.