Rapid7 Insight Agent Eval Injection Vulnerability Allowing Remote Code Execution on Linux

A vulnerability allowing eval injection has been identified in the Rapid7 Insight Agent's beaconing logic for Linux. This vulnerability could theoretically enable an attacker to execute remote code as root by sending a crafted beacon response. However, exploitation would likely require prior, highly privileged access to the Rapid7 backend platform, as the agent uses mutual TLS (mTLS) to verify commands from the platform.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution with root privileges on the affected Linux system.