CVE-2026-9153

Arbitrary File Read in Rapid7 InsightConnect Sed Plugin PUBLISHED

Description (CNA)

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.

Affected (CNA)

Vendor / product	Versions
Rapid7 / InsightConnect Sed Plugin	affected 0 before 2.0.5; unaffected 2.0.5

CWE

CWE-22, CWE-200

References

https://extensions.rapid7.com/extension/sed

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.