The Sed plugin in Rapid7 InsightConnect on Linux contains an input‑validation flaw that permits arbitrary file paths to be supplied via the expression parameter, enabling an authenticated user to read any file on the host. This flaw subsumes CWE‑200 (Information Exposure) and CWE‑22 (Path Traversal). The result is that confidential files, including configuration and credential files, can be exposed to an attacker who has access to the plugin.

Rapid7 InsightConnect Sed Plugin for Linux is impacted. No specific version numbers are listed; any installation that includes the Sed plugin is potentially vulnerable.

The CVSS score of 6.5 indicates a medium impact. EPSS data is unavailable, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be authenticated use of the Sed plugin; the description explicitly states “authenticated attackers” can exploit the flaw. Once authenticated, the attacker can read arbitrary files, but no remote code execution or denial of service is reported.