Rapid7

Exploited now

None of this vendor's CVEs are on CISA's known-exploited list.

Recent

• 7.8HighNov 5, 2026Rapid7 Metasploit Framework Auth bypass / access controlCVE-2026-121139The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated "bootstrap" exemption so that the very first administrator can be created when the users table is empty. While the table is empty, POST /api/v1/users is exempt from authentication by design: the route handler calls warden.authenticate!(scope: :admin_api), which resolves to AdminApiToken. The inherited ApiToken#authenticate! short-circuits and returns success!() whenever
• 7.8HighOct 29, 2026Rapid7 Insight Agent Code / command injectionCVE-2026-115805Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.
• 4.7MediumOct 21, 2026Rapid7 Metasploit Framework SSRFCVE-2026-109682Metasploit Framework versions before 6.5.7 allow HTTP requests made through send_request_cgi! to follow redirects to a different host without restricting the redirect destination. A malicious HTTP server can cause the system running Metasploit to make requests to arbitrary HTTP services reachable from the operator's network, including internal services that are not otherwise accessible to the attacker.
• 4.7MediumOct 21, 2026Rapid7 Metasploit Framework SSRFCVE-2026-109681The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mode response, causing the operator's machine to open a TCP connection to an arbitrary host.
• 9.8CriticalOct 13, 2026Rapid7 Metasploit Framework Auth bypass / access controlCVE-2026-87689The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_credential (PUT) and delete_credentials (DELETE) handlers for /api/v1/credentials, which omit the authentication call entirely. Because these handlers call directly into lib/msf/core/db_manager/cred.rb, which performs no authorization check of its own
• 8.8HighOct 12, 2026Rapid7 Metasploit Framework Path traversal / file handlingCVE-2026-87690The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the local destination path passed to client.fs.file.download_file(), with no sanitization. The underlying stdapi sink (lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb) writes to whatever path is supp
• 5.5MediumOct 5, 2026Rapid7 Velociraptor Privilege escalationCVE-2026-78413Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do anything and usually run with elevated permissions. To limit access to some dangerous artifact, Velociraptor allows for those to require high permissions like EXECVE to launch. The `Windows.Sysinternals.SysmonLogForward` is a monitoring artifact used to forward sysmon events to the server. The artifact allows the user to specify an arbitrary binary path as a parameter, and did
• 6.5MediumOct 5, 2026Rapid7 Velociraptor Auth bypass / access controlCVE-2026-78411Velociraptor's SetClientMetadata used the wrong permission check to enforce setting metadata on the server. This allows a user with LABEL_CLIENTS permission to update the server metadata. Server metadata is often used to store site wide configuration data that should only be updated by the server admin.
• 4.9MediumOct 5, 2026Rapid7 Velociraptor Auth bypass / access controlCVE-2026-78412Velociraptor's WatchEvent gRPC API can specify the OrgId of the org from which events should be streamed. The server checks the API permissions against the caller's Org instead of the requested Org. This allows a user with API access in one org to read events from another org for which they have no access.
• 7.7HighSep 10, 2026Rapid7 Velociraptor Code / command injectionCVE-2026-19584Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOK_EDITOR permission to plant a VQL query which will be evaluated at elevated permissions if the notebook's backup is subsequently restored.
• 9.9CriticalSep 10, 2026Rapid7 Velociraptor Privilege escalationCVE-2026-19583Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command execution on endpoints, and so it requires the EXECVE permission to schedule. However, no such check was implemented for client monitoring artifacts. Additionally there was no requirement that client monitoring artifacts carry the CLIENT_EVENTS type. This allows any user who can schedule client monitoring artifacts to also schedule otherwise r
• 3.3LowJun 25, 2026Rapid7 insightconnect compression Path traversal / file handlingCVE-2026-8662Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker.
• 6.0MediumJun 25, 2026Rapid7 insightconnect tcpdump Code / command injectionCVE-2026-8658OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the options or filter parameters due to insufficient input sanitization in shell command construction.
• 7.7HighJun 25, 2026Rapid7 insightconnect traceroute Code / command injectionCVE-2026-8666OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, max_ttl, count, or time_out request parameters due to insufficient input validation when constructing shell commands.
• 7.7HighJun 25, 2026Rapid7 insightconnect translate Code / command injectionCVE-2026-8665OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to insufficient input sanitization in shell command construction.
• 6.0MediumJun 25, 2026Rapid7 insightconnect finger Code / command injectionCVE-2026-8664OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction.
• 7.7HighJun 25, 2026Rapid7 insightconnect ping Code / command injectionCVE-2026-8660OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter due to insufficient input validation when constructing shell commands.
• 7.7HighJun 25, 2026Rapid7 insightconnect awk Code / command injectionCVE-2026-8592OS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to unsafe shell command construction in the processing pipeline.
• 6.0MediumJun 25, 2026Rapid7 insightconnect rpm Code / command injectionCVE-2026-8663OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the repo, key, or name parameters due to insufficient input sanitization in shell command construction.
• 6.0MediumJun 25, 2026Rapid7 insightconnect sqlmap Code / command injectionCVE-2026-8659OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api_host or api_port parameters during connection configuration due to insufficient input validation.
• 5.0MediumMay 6, 2026Rapid7 velociraptor Auth bypass / access controlCVE-2026-7573An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the complete ACL policy (roles and permissions) for any user across all organizations by supplying targeted Name and Org parameters via a network request.
• 4.4MediumMay 6, 2026Rapid7 velociraptor Denial of serviceCVE-2026-7572An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local attacker to cause a Denial of Service (DoS) via a process crash by providing a specially crafted .evtx file to the parse_evtx VQL plugin.
• 7.8HighApr 17, 2026Rapid7 insight agent Privilege escalationCVE-2026-6482The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host. Upon startup the agent service attempts to load an OpenSSL configuration file from a non-existent directory that is writable by standard users. By planting a crafted openssl.cnf file an attacker can trick the high-privilege service into executing arbitrary commands. This effectively permits an unprivileged user to bypass security con
• 8.0HighApr 15, 2026Rapid7 velociraptor Auth bypass / access controlCVE-2026-6290Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token. This allows an authenticated GUI user with access in one org, to use the query() plugin, in a notebook cell, to run VQL queries on other orgs which they may not have access to. The user's permissions in the other org are the same as the permissions they have in the org containing the notebook.
• 5.5MediumApr 10, 2026Rapid7 insight agent Privilege escalationCVE-2026-4482The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems (users have read and execute access). For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any locally authenticated standard user.
• 8.5HighApr 9, 2026Rapid7 velociraptorCVE-2026-5329Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in the client monitoring message handler on the Velociraptor server (primarily Linux) that allows an authenticated remote attacker to write to arbitrary internal server queues via a crafted monitoring message with a malicious queue name. The server handler that receives client monitoring messages does not sufficiently validate the queue name supplied by the client, allowing a rogue client to write ar
• 6.6MediumApr 8, 2026Rapid7 insight agent Code / command injectionCVE-2026-4837An eval() injection vulnerability in the Rapid7 Insight Agent beaconing logic for Linux versions could theoretically allow an attacker to achieve remote code execution as root via a crafted beacon response. Because the Agent uses mutual TLS (mTLS) to verify commands from the Rapid7 Platform, it is unlikely that the eval() function could be exploited remotely without prior, highly privileged access to the backend platform.
• 6.8MediumDec 29, 2025Rapid7 velociraptor Path traversal / file handlingCVE-2025-14728Rapid7 Velociraptor versions before 0.75.6 contain a directory traversal issue on Linux servers that allows a rogue client to upload a file which is written outside the datastore directory. Velociraptor is normally only allowed to write in the datastore directory. The issue occurs due to insufficient sanitization of directory names which end with a ".", only encoding the final "." AS "%2E". Although files can be written to incorrect locations, the containing directory must end with "%2E". This

See every Rapid7 entry on the dashboard.

Top products

• Velociraptor10 CVEs in the last year, 1 critical
• Metasploit Framework5 CVEs in the last year, 1 critical
• Insight Agent4 CVEs in the last year
• insightconnect translate1 CVE in the last year
• insightconnect traceroute1 CVE in the last year
• insightconnect tcpdump1 CVE in the last year
• insightconnect sqlmap1 CVE in the last year
• insightconnect rpm1 CVE in the last year
• insightconnect ping1 CVE in the last year
• insightconnect finger1 CVE in the last year