CVE-2019-5629
Rapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent 2.6.3 and prior starts, the Python
02 Description
Rapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent 2.6.3 and prior starts, the Python
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 0.93% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 60.6% of scored records. A rank, not a probability.
- NVD base score
- 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2019-07-13 00:15Z7 YR AGO
- Last updated
- 2024-09-16 22:45Z2 YR AGO
- Reserved
- 2019-01-07
- Assigning CNA
- rapid7
- Record state
- PUBLISHED
- Severity
- High (CVSS 7.8)
- CNA CVSS vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-427Uncontrolled Search Path ElementBase
- Data version
- 5.1
- Document digest
- 70775773d7d32529ae58b3b2caca0cf16f44c6448cce1417af50da14c242ac3a
05 Affected products
06 References
- seclists.org20190603 Rapid7's Windows InsightIDR Agent: Local Privilege Escalationhttps://seclists.org/bugtraq/2019/Jun/0
- packetstormsecurity.comhttp://packetstormsecurity.com/files/153159/Rapid7-Windows-InsightIDR-Agent-2.6.3.14-Local-Privilege-Escalation.html
- seclists.org20190611 Rapid7's Windows InsightIDR Agent: Local Privilege Escalationhttp://seclists.org/fulldisclosure/2019/Jun/13
- help.rapid7.comhttps://help.rapid7.com/insightagent/release-notes/archive/2019/05/#20190529
- bogner.shhttps://bogner.sh/2019/06/local-privilege-escalation-in-rapid7s-windows-insight-idr-agent/
07 Remediation
This issue affects Insight Agent instances at version 2.6.4 and older. Insight Agent will normally update automatically. Otherwise, if your Insight Agent instances are not running 2.6.5 or higher, ensure that you update all instances to 2.6.5 (or later if available).