Rapid7 vulnerabilities
We track 42 vulnerabilities in Rapid7 products across 28 products. 42 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest Rapid7 vulnerabilities
- 7.3 High severity
Metasploit Framework: Missing Authentication for Critical Functionality
The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated "bootstrap" exemption so that the very first administrator can be created when the users table is empty. While the table is empty, P
- 7.8 High severity
Insight Agent: Improper Neutralization of Special Elements used in an OS Command
Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the c
- 9.8 Critical severity
Metasploit Framework: Missing Authentication for Critical Functionality
The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_credential
- 8.8 High severity
Metasploit Framework: Improper Limitation of a Pathname to a Restricted Directory
The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or t
- 7.8 High severity
Insight Agent: Uncontrolled Search Path Element
An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or bel
- 9.9 Critical severity
Velociraptor: Improper Neutralization of Internal Special Elements
Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiled_collector_args" is an internal field, Velociraptor allowed the field to be set from a user
- 7.7 High severity
Velociraptor: Improper Control of Generation of Code
Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOO
- 9.9 Critical severity
Velociraptor: Incorrect Permission Assignment for Critical Resource
Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command execution on endpoints, and so it requires the EXECVE permission to schedule. However, no such check was
- 8.9 High severity
Velociraptor: Improper Control of Generation of Code
The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an implementation fault in this VQL function, the global artifact repository is used which allows callers to overwrite existing artifacts without t
- 8.1 High severity
Velociraptor: Improper Handling of URL Encoding (Hex Encoding)
Velociraptor's web GUI allows specifying a custom type for columns in tables. The URL type takes the cell value and forms a URL which can be clicked in the GUI.The code does not limit the schemes allowed in this URL , allowing an attacker to specify a JavaScri
- 8.2 High severity
Velociraptor: Missing Authorization
Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the authorization pro
- 7.1 High severity
Velociraptor: Improper Limitation of a Pathname to a Restricted Directory
The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK_EDIT permission to write the notebook record outside the org's data store directory. The file written must have an extension of ".json.db" but can ot
- 7.3 High severity
Velociraptor: Authentication Bypass by Spoofing
When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, some IdP allow users to change the email claim without verification. Some IdPs do not set the "email_verified" claim and do not actually veri
- 8.7 High severity
Velociraptor: Improper Handling of Insufficient Permissions or Privileges
Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment. Users can have different permissions in each org. To manage Orgs, Velociraptor
- 7.2 High severity
Velociraptor: Incorrect Authorization
Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have the IMPERSONATE permission (usually only given to administrators). Velociraptor v
- 9.6 Critical severity
Velociraptor: Authentication Bypass by Spoofing
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-Metadata-USER\". This can lead to an account takeover attack from a user with low privileges to administrator.
- 7.8 High severity
InsightVM: Execution with Unnecessary Privileges
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential (Scan Engine) or as root/SYSTEM (Insight
- 8.8 High severity
InsightConnect Tcpdump Plugin: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the options or filter parameters due to insufficient input sanitization in shell command construction.
- 9.8 Critical severity
InsightConnect Traceroute Plugin: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, max_ttl, count, or time_out request parameters due to insufficient inpu
- 9.8 Critical severity
InsightConnect TR Plugin: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to insufficient input sanitization in shell command constr
- 8.8 High severity
InsightConnect Finger Plugin: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction.
- 9.8 Critical severity
InsightConnect Ping Plugin: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter due to insufficient input validation when constructing shell commands.
- 9.8 Critical severity
InsightConnect AWK Plugin: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to unsafe shell command construction in the processi
- 8.8 High severity
InsightConnect Sed Plugin: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation.
- 8.8 High severity
InsightConnect RPM Plugin: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the repo, key, or name parameters due to insufficient input sanitization in shell command construction.
- 8.8 High severity
InsightConnect SQLmap Plugin: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api_host or api_port parameters during connection configuration due to insufficient input validation.
- 7.8 High severity
Velociraptor: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in client_info.json inside a collection ZIP is inserted into a YAML template via Go's text/template without esca
- 8.5 High severity
Metasploit Pro: Improper Access Control
Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows host. When started the metasploitPostgreSQL service would start the postgres.exe child process which would in turn load an O
- 7.8 High severity
Insight Agent: Inclusion of Functionality from Untrusted Control Sphere
The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host. Upon startup the agent service attempts to load an OpenSSL configuration file from a non-existe
- 9.1 Critical severity
Velociraptor: Incorrect Authorization
Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token. This allows an authenticated GUI user with access in one org, to use the query() plugin, in a notebook cell,
- 7.2 High severity
Insight Agent: Improper Neutralization of Directives in Dynamically Evaluated Code
An eval() injection vulnerability in the Rapid7 Insight Agent beaconing logic for Linux versions could theoretically allow an attacker to achieve remote code execution as root via a crafted beacon response. Because the Agent uses mutual TLS (mTLS) to verify co
- 9.6 Critical severity
Vulnerability Management: Improper Authentication
Rapid7 InsightVM versions before 8.34.0 contain a signature verification issue on the Assertion Consumer Service (ACS) cloud endpoint that could allow an attacker to gain unauthorized access to InsightVM accounts setup via "Security Console" installations, res
- 8.6 High severity
Velociraptor: Files or Directories Accessible to External Parties
Rapid7 Velociraptor MSI Installer versions below 0.73.3 suffer from a vulnerability whereby it creates the installation directory with WRITE_DACL permission to the BUILTIN\\Users group. This allows local users who are not administrators to grant themselves the
- 7.8 High severity
Minerva: Missing Authorization
Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute arbitrary code with SYSTEM privilege. The vulnerability is caused by the product's implementation of
- 7.5 High severity
Insight Agent: Improper Limitation of a Pathname to a Restricted Directory
Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby unsanitized input from a CLI argument flows into io.ioutil.WriteFile, where it is used as a path. This can result in a Path Traversal vulnerabi
- 9.8 Critical severity
Nexpose: Direct Request
Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability. This vulnerability allows an attacker to manipulate URLs to forcefully browse to and access administrative pages. This vulnerability is fixed in version 6.6.187.
- 8.8 High severity
InsightCloudSec: Improper Control of Generation of Code
An authenticated attacker can leverage an exposed resource.db() accessor method to smuggle Python method calls via a Jinja template, which can lead to code execution. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in versi
- 8.1 High severity
InsightCloudSec: Improper Isolation or Compartmentalization
An authenticated attacker can leverage an exposed “box” object to read and write arbitrary files from disk, provided those files can be parsed as yaml or JSON. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2
- 8.8 High severity
InsightCloudSec: Improper Control of Generation of Code
An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS deployments on February 1
- 8.8 High severity
Velociraptor: Missing Authorization
Rapid7 Velociraptor allows users to be created with different privileges on the server. Administrators are generally allowed to run any command on the server including writing arbitrary files. However, lower privilege users are generally forbidden from writing