VULNERABILITY INTELLIGENCE

CVE-2026-8662

CVSS score3.3 LOW
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-06-25
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L

Description

Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker.

Weakness classification

  • cve@rapid7.com: CWE-22

Primary references