CVE-2020-7381

CVE-2020-7381 describes a local privilege escalation vulnerability in Rapid7 Nexpose installer versions prior to 6.6.40. An attacker with local machine access could place a malicious executable with a specific filename, which the installer would then execute instead of the legitimate one during a Security Console installation. This vulnerability is rated High severity (CVSS 7.8) due to its potential for complete compromise of confidentiality, integrity, and availability, requiring user interaction but with low attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.