What is GHSA-x3f7-qmw7-g6pj?

GHSA-x3f7-qmw7-g6pj is a security advisory published by GitHub Security Advisories with Low severity. Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression...

Which CVE IDs does GHSA-x3f7-qmw7-g6pj cover?

GHSA-x3f7-qmw7-g6pj covers the following CVE IDs: CVE-2026-8662. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x3f7-qmw7-g6pj?

GHSA-x3f7-qmw7-g6pj has a CVSS v3 base score of 3.3, published by GitHub Security Advisories.

GHSA-x3f7-qmw7-g6pjLowCVSS 3.3

Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression...

Vendor

GitHub Security Advisories

Published

June 25, 2026

Last Modified

June 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-8662 →

📋 Description

Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-8662
https://extensions.rapid7.com/extension/compression
https://github.com/advisories/GHSA-x3f7-qmw7-g6pj