Skip to content
OpenAdvisories
High WID-SEC-2026-2728 15 CVEs

Rapid7 Velociraptor: Mehrere Schwachstellen

Published Aug 10, 2026 · Updated Aug 18, 2026 · Revision 4 · de-DE

Vendor: Rapid7 Product: Velociraptor Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Rapid7 Velociraptor ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen, Sicherheitsmaßnahmen zu umgehen, Spoofing- und Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Product

Rapid7 Velociraptor ist ein Tool zur Endpunkt-Erkennung und -Reaktion (EDR) und zur digitalen Forensik, das eine leistungsstarke Sammlung von Tools zur Überwachung und Analyse von Endpunkten bietet.

Vulnerabilities 15

  • Critical 9.6
    CVE-2026-18972

    Velociraptor authenticated identity-spoofing vulnerability

    An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-Metadata-USER\". This can lead to an account takeover attack from a user with low privileges to administrator.

    Rapid7 Velociraptor
  • High 8.7
    CVE-2026-18860

    Velociraptor incorrect Org deletion permissions check

    Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment. Users can have different permissions in each org. To manage Orgs, Velociraptor…

    Rapid7 Velociraptor
  • High 8.2
    CVE-2026-64954

    Velociraptor collect_client() Permissions Bypass

    Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the authorization pr…

    Rapid7 Velociraptor
  • High 8.1
    CVE-2026-15371

    Velociraptor Stored XSS in URL column types

    Velociraptor's web GUI allows specifying a custom type for columns in tables. The URL type takes the cell value and forms a URL which can be clicked in the GUI.The code does not limit the schemes allowed in this URL , allowing an attacker to specify a JavaScr…

    Rapid7 Velociraptor
  • High 7.3
    CVE-2026-18639

    Velociraptor OIDC Authenticator susceptible to email spoofing

    When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, some IdP allow users to change the email claim without verification. Some IdPs do not set the "email_verified" claim and do not actually ver…

    Rapid7 Velociraptor
  • High 7.2
    CVE-2026-18635

    Velociraptor query plugin allows impersonation in other orgs

    Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have the IMPERSONATE permission (usually only given to administrators). Velociraptor …

    Rapid7 Velociraptor
  • High 7.1
    CVE-2026-18640

    Velociraptor directory traversal via the NewNotebook API

    The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK_EDIT permission to write the notebook record outside the org's data store directory. The file written must have an extension of ".json.db" but can o…

    Rapid7 Velociraptor
  • Medium 6.8
    CVE-2026-18636

    Velociraptor VFSGetBuffer API path deny list bypass

    The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix che…

    Rapid7 Velociraptor
  • Medium 6.5
    CVE-2026-18638

    Velociraptor server crash via the SetPassword API

    Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a username that does not exist.

    Rapid7 Velociraptor
  • Medium 6.5
    CVE-2026-18652

    Velociraptor STACK Type Download Path Bypasses Denied Prefix Check

    Velociraptor allows reading Stacked result sets from the GUI.  Velociraptor's multi-tenant design stores sub orgs within the datastore directory. The path requested by the GUI is not correctly checked against the prefix deny list, allowing result sets to read…

    Rapid7 Velociraptor
  • Medium 6.5
    CVE-2026-64952

    Velociraptor Hunt Deletion With Insufficient Permission Check

    The hunt_delete() VQL function allows deleting hunts.  Velociraptor misapplied the permission check requiring only COLLECT_CLIENT (usually assigned to the "investigator" role) instead of the "DELETE_RESULTS" permission (usually only assigned to "administrator…

    Rapid7 Velociraptor
  • Medium 6.2
    CVE-2026-17535

    Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes

    Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images. Typically Velociraptor's NTFS parser is used on live NTFS filesystems, limiting the opportunity of attack…

    Rapid7 Velociraptor
  • Medium 6.1
    CVE-2026-64955

    Velociraptor CSV Formula Injection in Export Pipeline

    When Microsoft Excel imports a CSV file, it executes cells beginning with certain characters as formulas, giving such CSV files arbitrary execution.  Velociraptor fails to sanitize such cells when exporting to CSV from various places such as the GUI, offline …

    Rapid7 Velociraptor
  • Medium 4.1
    CVE-2026-18348

    Velociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL plugins

    Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission…

    Rapid7 Velociraptor
  • Low 3.5
    CVE-2026-64951

    Velociraptor DoS triggered by Divide by Zero panic

    A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile() function.

    Rapid7 Velociraptor

Revision history

  1. #4

    Referenz(en) aufgenommen: EUVD-2026-60571

  2. #3

    Referenz(en) aufgenommen: EUVD-2026-57161, EUVD-2026-57160, EUVD-2026-57159, EUVD-2026-57158

  3. #2

    Referenz(en) aufgenommen: EUVD-2026-56153, EUVD-2026-56127, EUVD-2026-56187, EUVD-2026-56185, EUVD-2026-56184, EUVD-2026-56183, EUVD-2026-56180, EUVD-2026-56178

  4. #1

    Initiale Fassung

References