CVE-2026-8665

Name of the Vulnerable Software and Affected Versions Rapid7 InsightConnect Translate Plugin (affected versions not specified)

Description An OS Command Injection issue exists in the TR action of the plugin when running on Linux. Remote attackers can execute arbitrary operating system commands by providing crafted input to the text or expression parameters. This occurs because the software does not sufficiently sanitize input used to construct shell commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.