CVE-2019-5629 is a local privilege escalation vulnerability affecting Rapid7 Insight Agent versions 2.6.3 and prior. It stems from an uncontrolled DLL search path, allowing a malicious local user to elevate privileges to SYSTEM during agent startup by placing a crafted python3.dll in a writable directory. This vulnerability has a CVSS score of 7.8 (High), indicating low attack complexity and requiring local access, but leading to high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has received some community discussion and media coverage, suggesting awareness within the security community. Rapid7 addressed this issue in Insight Agent version 2.6.4.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.6.3CPE matchmatch criteria | cpe:2.3:a:rapid7:insight_agent:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.