This vulnerability involves improper limitation of a pathname to a restricted directory (CWE-22) in the create_archive function of the Rapid7 InsightConnect Compression Plugin on Linux. Authenticated users with high privileges can supply specially crafted filenames that cause files to be written outside the intended archive directory. Although this can result in file corruption, the attacker cannot control the content of the files written. There is no indication of remote exploit without authentication or user interaction. No patch or official remediation guidance is currently available.

The impact is limited to file corruption due to unauthorized file writes outside the intended directory. Confidentiality is not affected, as the attacker cannot control file content. Availability impact is low, limited to potential disruption caused by corrupted files. There is no indication of privilege escalation or remote code execution.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the plugin to trusted authenticated users only and monitor for unusual file modifications related to archive creation. No official fix or temporary workaround has been published by Rapid7 at this time.