CVE-2020-7376: RAPID7 Metasploit

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability in the get_keychains method which can be exploited to write arbitrary files to arbitrary locations on the host filesystem when the module is run on a malicious host.

Affected products

• RAPID7 Metasploit: from 4.11.7, before 6.0.3 (fixed in 6.0.3)

Published 2020-08-24. Last modified 2026-06-17.