CVE-2026-8661
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk17th percentile — higher than 17% of all known CVEs
Summary
Server-Side Cross-Site Scripting (XSS) and Server-Side Request Forgery (SSRF) vulnerability in the markdown_to_pdf action of Rapid7 InsightConnect Markdown Plugin version 3.1.4 and earlier on Linux. A remote attacker can execute JavaScript server-side and make arbitrary outbound HTTP requests via crafted content embedded in Markdown input. The PDF rendering engine does not restrict script execution or outbound network access.
Risk Assessment
The risk to the organization includes the possibility of remote code execution via JavaScript on the server and sending unauthorized HTTP requests, which could lead to data leakage, privilege escalation, or attacks on internal network resources.
Recommendation
It is recommended to immediately update the Markdown plugin to a version newer than 3.1.4 and implement input validation and sanitization mechanisms for Markdown data, as well as restrict network access for the PDF rendering process.
Original NVD description (English source)
Server-Side Cross-Site Scripting and Server-Side Request Forgery vulnerability in the markdown_to_pdf action of Rapid7 InsightConnect Markdown Plugin version 3.1.4 and earlier on Linux allows remote attackers to execute JavaScript server-side and make arbitrary outbound HTTP requests via crafted content embedded in Markdown input. The PDF rendering engine does not restrict script execution or outbound network access.