CVE-2026-8660 — OS Command Injection in Rapid7 InsightConnect Ping Plugin

CVE-2026-8660

OS Command Injection in Rapid7 InsightConnect Ping Plugin PUBLISHED

Description (CNA)

OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter due to insufficient input validation when constructing shell commands.

Affected (CNA)

Vendor / product	Versions
Rapid7 / InsightConnect Ping Plugin	affected 0 before 1.0.4; unaffected 1.0.4

CWE

CWE-78

References

https://extensions.rapid7.com/extension/ping

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.