CVE-2017-5234: RAPID7 Insight Collector

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.

Affected products

• RAPID7 Insight Collector: up to and including 1.0.15

Published 2017-03-02. Last modified 2026-06-17.