What is GHSA-wg7x-99f3-xx6h?

GHSA-wg7x-99f3-xx6h is a security advisory published by GitHub Security Advisories with High severity. Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow...

Which CVE IDs does GHSA-wg7x-99f3-xx6h cover?

GHSA-wg7x-99f3-xx6h covers the following CVE IDs: CVE-2026-115805. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wg7x-99f3-xx6h?

GHSA-wg7x-99f3-xx6h has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-wg7x-99f3-xx6hHighCVSS 7.8

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow...

Vendor

GitHub Security Advisories

Published

October 29, 2026

Last Modified

October 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-115805 →

📋 Description

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-115805
https://docs.rapid7.com/insight/release-notes-2026-october/#rapid7-agent-insight-agent
https://github.com/advisories/GHSA-wg7x-99f3-xx6h