CVE-2026-4482 Insight Agent Private Key Information Disclosure via Inherited File Permissions
Local attackers can read private key files due to weak permissions, exposing agent identity material.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-4482?
CVE-2026-4482 is a medium-severity vulnerability in Rapid7 Insight Agent, published on 10 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems (users have read and execute access). For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any locally authenticated standard user.
Weakness: CWE-732
Which versions are affected by CVE-2026-4482?
It affects 1 product.
Products include Rapid7 Insight Agent.
How do I fix CVE-2026-4482?
No fix has been published for CVE-2026-4482 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-4482 being exploited?
There is no known exploitation of CVE-2026-4482 in the wild and no public exploit code.
Other vulnerabilities in Rapid7 Insight Agent
- CVE-2026-6482 Local Privilege Escalation via OpenSSL configuration file in Insight Agent
- CVE-2021-4007 Rapid7 Insight Agent Privilege Escalation
- CVE-2019-5629 Privilege escalation in Insight Agent
- CVE-2026-4837 Eval Injection in Rapid7 Insight Agent
- CVE-2023-2273 Rapid7 Insight Agent Directory Traversal
Sources
Also known as GHSA-3r4x-4pr5-j666.