CriticalCVSS 9.8
EPSS 2.4%
rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.