CVE-2026-4482CWE-732

Insight Agent Private Key Information Disclosure via Inherited File Permissions

Medium · published April 10, 2026

CVSS v4.0
6.8
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems (users have read and execute access). For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any locally authenticated standard user.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:L/SA:L
EPSS
0.00101 · 0.9th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-04-10T04:22Z
EPSS history
Timeline
  • 10 APR 04:22Z
    Insight Agent Private Key Information Disclosure via Inherited File Permissions
    cvelistv5