This vulnerability (CVE-2026-8658) affects the Rapid7 InsightConnect Tcpdump Plugin on Linux. It arises from improper neutralization of special elements in OS commands (CWE-78), specifically in the handling of options or filter parameters that are used to construct shell commands. Authenticated attackers with high privileges can exploit this flaw to execute arbitrary OS commands, potentially impacting integrity and availability. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, low confidentiality impact, high integrity impact, and low availability impact. There is no vendor advisory or patch information available at this time.

An authenticated attacker with high privileges can execute arbitrary OS commands on the affected system via crafted options or filter parameters. This can lead to unauthorized modification of system state (high integrity impact) and limited disruption of availability (low availability impact). Confidentiality impact is low. The vulnerability does not require user interaction and can be exploited remotely over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the InsightConnect Tcpdump Plugin to trusted users only and monitor for suspicious activity related to command execution. Avoid passing untrusted input to the plugin's options or filter parameters.