CVE-2026-8662

LOW

Path Traversal in Rapid7 InsightConnect Compression Plugin

Title source: cna
STIX 2.1

Description

Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory
https://extensions.rapid7.com/extension/compression

Scores

CVSS v3 3.3
EPSS 0.0022
EPSS Percentile 12.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-22
Status published
Products (3)
Rapid7/InsightConnect Compression Plugin < 2.0.3
Rapid7/InsightConnect Compression Plugin 2.0.3
rapid7/insightconnect_compression < 2.0.3
Published Jun 25, 2026
Tracked Since Jun 25, 2026