CVE-2026-9153CWE-200CWE-22

Arbitrary File Read in Rapid7 InsightConnect Sed Plugin

Medium · published June 25, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00453 · 38.3th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-06-25T00:33Z
EPSS history
Timeline
  • 25 JUN 00:33Z
    Arbitrary File Read in Rapid7 InsightConnect Sed Plugin
    cvelistv5