https://vulnerability.circl.lu/sightings/feed 2026-07-11T03:41:27.255573+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c0382574-fc46-45ac-a39b-8ca0ffc1e6b8/export 2026-07-11T03:41:27.273427+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c0382574-fc46-45ac-a39b-8ca0ffc1e6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5629", "type": "seen", "source": "https://t.me/cibsecurity/33934", "content": "\u203c CVE-2021-4007 \u203c\n\nRapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at \"C:\\DLLs\\python3.dll,\" which normally is writable by locally authenticated users. Because of this, a malicious local user could use Insight Agent's startup conditions to elevate to SYSTEM privileges. This issue was fixed in Rapid7 Insight Agent 3.1.2.35. This vulnerability is a regression of CVE-2019-5629.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-14T18:15:20.000000Z"} 2021-12-14T18:15:20+00:00