CVE-2026-6482

CVE-2026-6482 is a local privilege escalation vulnerability affecting Rapid7 Insight Agent versions greater than 4.1.0.2 on Windows systems. The flaw stems from the agent service attempting to load an OpenSSL configuration file from a writable directory during startup, allowing unprivileged users to plant malicious configuration files and achieve SYSTEM-level code execution. The vulnerability presents a low-complexity attack vector requiring local access, with the potential for complete host compromise. An unauthenticated standard user can exploit this weakness to bypass security controls and gain full administrative access to the affected Windows host through the high-privilege agent service. Exploitation status remains minimal at present. The vulnerability is not listed in the Known Exploited Vulnerabilities catalog, has not been added to any active hot lists, and demonstrates extremely low real-world exploitation activity with an EPSS score of 0.000060000. However, organizations running vulnerable versions should prioritize patching to mitigate the risk of future exploitation.