CVE-2026-9153
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.
Risk Assessment
The risk involves unauthorized access to sensitive system files, potentially leading to data leakage or privilege escalation.
Recommendation
It is recommended to immediately update the Sed plugin to the latest version and implement strict validation of the expression parameter in InsightConnect configurations.
Other vulnerabilities in Rapid7 InsightConnect Sed Plugin on Linux
See all- CVE-2026-9155High
OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation.
- CVE-2026-9154High
Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter.
Original NVD description (English source)
Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.