Skip to content
OpenAdvisories

Vendor

Velocidex

5 known vulnerabilities.

Products

velociraptor 3 WinPmem 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-85737

    Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin

    Velociraptor is a tool for collecting host-based state information using Velociraptor Query Language (VQL) queries. Prior to 0.77.2, SQLPlugin.Call in vql/parsers/sql/sql.go does not enforce plugin-level FILESYSTEM_READ or NETWORK checks before the mysql and …

    Velocidex velociraptor www.velocidex.com/golang/velociraptor Go
  • Medium 4.4
    CVE-2026-7572

    Velociraptor EVTX Parser — Process Crash via Crafted .evtx File

    An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local attacker to cause a Denial of Service (DoS) via a process crash by providing a special…

    Velocidex velociraptor www.velocidex.com/golang/velociraptor Go
  • Medium 5.0
    CVE-2026-7573

    GetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizations

    An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the complete ACL policy (roles and permissions) for any user across all organization…

    Velocidex velociraptor www.velocidex.com/golang/velociraptor Go