CVE-2026-6482 | Rapid7 Insight Agent 4.1.0.2 Agent Service openssl.cnf inclusion of functionality from untrusted control sphere

A vulnerability has been found in Rapid7 Insight Agent 4.1.0.2 and classified as problematic. This affects an unknown function of the file openssl.cnf of the component Agent Service. The manipulation leads to inclusion of functionality from untrusted control sphere.

This vulnerability is referenced as CVE-2026-6482. The attack can only be performed from a local environment. No exploit is available.

The affected component should be upgraded.