Unrated severityNVD Advisory· Published Jun 25, 2026· Updated Jun 25, 2026
OS Command Injection in Rapid7 InsightConnect Traceroute Plugin
CVE-2026-8666
Description
OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, max_ttl, count, or time_out request parameters due to insufficient input validation when constructing shell commands.
Affected products
1Patches
Vulnerability mechanics
References
1- extensions.rapid7.com/extension/traceroutemitrevendor-advisory
News mentions
0No linked articles in our index yet.