CVE-2026-9154

Arbitrary File Write in Rapid7 InsightConnect Sed Plugin PUBLISHED

Description (CNA)

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter.

Affected (CNA)

Vendor / product	Versions
Rapid7 / InsightConnect Sed Plugin	affected 0 before 2.0.5; unaffected 2.0.5

CWE

CWE-22

References

https://extensions.rapid7.com/extension/sed

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.