This vulnerability (CVE-2026-8659) affects the Rapid7 InsightConnect SQLmap Plugin on Linux platforms. It arises from improper neutralization of special elements in OS commands (CWE-78), specifically in the handling of the api_host and api_port parameters during connection configuration. Authenticated users can leverage this flaw to execute arbitrary operating system commands due to insufficient input validation. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, low confidentiality impact, high integrity impact, and low availability impact. There is no vendor advisory or patch information available, and no known exploits in the wild have been reported.

Successful exploitation allows an authenticated attacker to execute arbitrary OS commands on the host running the InsightConnect SQLmap Plugin. This can lead to high integrity impact by modifying or corrupting data or system state, low confidentiality impact, and low availability impact. The attack requires high privileges and network access but no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the plugin to trusted users only and validate or sanitize inputs to the api_host and api_port parameters if possible. Monitor for unusual command execution activity related to the plugin.