PT-2026-31327 · Rapid7 · Rapid7 Insight Agent

Cyberdagger + 1 · Published 2026-04-08 · Updated 2026-04-13 · CVE-2026-4837

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rapid7 Insight Agent versions (affected versions not specified)

Description A flaw exists in the beaconing logic of the Rapid7 Insight Agent for Linux, potentially allowing an attacker to execute code remotely as root through a crafted beacon response. The agent employs mutual TLS (mTLS) to validate commands from the Rapid7 Platform, making remote exploitation without prior, elevated privileges unlikely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Eval Injection

Weakness Enumeration

CWE-95

Related Identifiers

CVE-2026-4837

Affected Products

Rapid7 Insight Agent

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-4837 · Security Note
• https://twitter.com/CVEnew/status/2041975638823723403 · Twitter Post
• https://docs.rapid7.com/insight/release-notes-2026-april/#improvements-and-fixes · Note
• https://t.me/CVEtracker/50072 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2041937107699028464 · Twitter Post
• https://twitter.com/vitobotta/status/2043662927358468173 · Twitter Post
• https://twitter.com/infoflowcloud/status/2041977138044170523 · Twitter Post