CVE-2026-8665 — OS Command Injection in Rapid7 InsightConnect Translate Plugin

CVE-2026-8665

OS Command Injection in Rapid7 InsightConnect Translate Plugin PUBLISHED

Description (CNA)

OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to insufficient input sanitization in shell command construction.

Affected (CNA)

Vendor / product	Versions
Rapid7 / InsightConnect TR Plugin	affected 0 before 2.0.3; unaffected 2.0.3

CWE

CWE-78

References

https://extensions.rapid7.com/extension/tr

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.