The tweet was deleted by the author.
But we saved everything 🙂.
Rapid7 has identified a chain of security vulnerabilities in Gainsight Assist, an email plugin widely used within Customer Success software.
The flaws include CVE-2026-31381, which is an information disclosure vulnerability, and CVE-2026-31382, a reflected cross-site scripting (XSS) issue. Users of the plugin are urged to review the official advisories and implement recommended patches to mitigate potential exploitation risks. The vulnerabilities could expose sensitive customer data and disrupt business processes within organizations relying on Gainsight Assist.
The recent exposure of vulnerabilities in Gainsight Assist reinforces the persistent challenges organizations face in maintaining robust cybersecurity. These concerns align with earlier coverage of Rapid7’s expertise, as illustrated by the company's launch of the Hacktics and Telemetry podcast, which delves into emerging security threats and best practices. Furthermore, past reporting on Rapid7's research into stealth Linux backdoors underscores the ongoing evolution of attack vectors targeting enterprise software ecosystems.