Skip to contentRapid7 Velociraptor vulnerabilities
- rapid7 velociraptorVelociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL pluginCVE-2026-85737Fix available6.5 Medium
- rapid7 velociraptorVelociraptor privilege escalation via SysmonLogForward client monitoring artifactCVE-2026-784135.5 Medium
- rapid7 velociraptorVelociraptor Server Metadata update with Insufficient Permission CheckCVE-2026-784116.5 Medium
- rapid7 velociraptorWatchEvent API streams another organization's live eventsCVE-2026-784124.9 Medium
- rapid7 velociraptorVelociraptor Authenticated Denial of ServiceCVE-2026-777986.5 Medium
- rapid7 velociraptorVelociraptor Prefetch parser out of boundsCVE-2026-777973.6 Low
- rapid7 velociraptorVelociraptor Investigator reaches SuperUser via hunt EffectivePrincipalCVE-2026-190729.9 Critical
- rapid7 velociraptorVelociraptor VQL injection during notebook restore from backupCVE-2026-195847.7 High
- rapid7 velociraptorVelociraptor Required Permissions bypass by using client monitoring queriesCVE-2026-195839.9 Critical
- rapid7 velociraptorVelociraptor Analyst overwrites live built-in artifacts through verify()CVE-2026-192008.9 High
- rapid7 velociraptorVelociraptor Stored XSS in URL column typesCVE-2026-153718.1 High
- rapid7 velociraptorVelociraptor STACK Type Download Path Bypasses Denied Prefix CheckCVE-2026-186526.5 Medium
- rapid7 velociraptorVelociraptor DoS triggered by Divide by Zero panicCVE-2026-649513.5 Low
- rapid7 velociraptorVelociraptor Hunt Deletion With Insufficient Permission CheckCVE-2026-649526.5 Medium
- rapid7 velociraptorVelociraptor CSV Formula Injection in Export PipelineCVE-2026-649556.1 Medium
- rapid7 velociraptorVelociraptor collect_client() Permissions BypassCVE-2026-649548.2 High
- rapid7 velociraptorVelociraptor OIDC Authenticator susceptible to email spoofingCVE-2026-186397.3 High
- rapid7 velociraptorVelociraptor server crash via the SetPassword APICVE-2026-186386.5 Medium
- rapid7 velociraptorVelociraptor directory traversal via the NewNotebook APICVE-2026-186407.1 High
- rapid7 velociraptorVelociraptor incorrect Org deletion permissions checkCVE-2026-188608.7 High
- rapid7 velociraptorVelociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS VolumesCVE-2026-175356.2 Medium
- rapid7 velociraptorVelociraptor VFSGetBuffer API path deny list bypassCVE-2026-186366.8 Medium
- rapid7 velociraptorVelociraptor query plugin allows impersonation in other orgsCVE-2026-186357.2 High
- rapid7 velociraptorVelociraptor authenticated identity-spoofing vulnerabilityCVE-2026-189729.6 Critical
- rapid7 velociraptorVelociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL pluginsCVE-2026-183484.1 Medium
- rapid7 velociraptorA YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7...CVE-2026-87957.8 High
- rapid7 velociraptorHTTP Filestore Endpoints Misapply Permissions Across OrganizationsCVE-2026-6863Fix available6.8 Medium
- rapid7 velociraptorVelociraptor EVTX Parser — Process Crash via Crafted .evtx FileCVE-2026-7572Fix available4.4 Medium
- rapid7 velociraptorGetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizationsCVE-2026-7573Fix available5.0 Medium
- rapid7 velociraptorUnbounded Memory Allocation in VQLResponse Result-Set WriterCVE-2026-69484.9 Medium
- rapid7 velociraptorVelociraptor Query() Plugin Misapplies Permissions To OrgsCVE-2026-62908.0 High
- rapid7 velociraptorRapid7 Velociraptor Improper Input Validation in Client Message HandlerCVE-2026-53298.5 High
- rapid7 velociraptorRapid7 Velociraptor Directory Traversal VulnerabilityCVE-2025-147286.8 Medium
- rapid7 velociraptorVelociraptor priviledge escalation via UpdateConfig artifactCVE-2025-6264Public exploitFix available5.5 Medium
- rapid7 velociraptorVelociraptor Shell Plugin Prevent_execve BypassCVE-2025-09143.8 Low
- rapid7 velociraptorRapid7 Velociraptor Local Privilege Escalation In Windows Velociraptor ServiceCVE-2024-105268.6 High
- rapid7 velociraptorRapid7 Velociraptor Reflected XSSCVE-2023-59508.6 High
- rapid7 velociraptorVelociraptor crashes while parsing some malformed PE or OLE files.CVE-2023-22263.3 Low
- rapid7 velociraptorRapid7 Velociraptor directory traversal in client ID parameterCVE-2023-0290Fix available4.3 Medium
- rapid7 velociraptorInsufficient permission check in the VQL copy() functionCVE-2023-0242Fix available8.8 High
- rapid7 velociraptorXSS in User InterfaceCVE-2022-356324.8 Medium
- rapid7 velociraptorFilesystem race on temporary filesCVE-2022-356315.5 Medium
- rapid7 velociraptorUnsafe HTML Injection in Artifact Collection ReportCVE-2022-356306.1 Medium
- rapid7 velociraptorVelociraptor Client ID SpoofingCVE-2022-356295.4 Medium
- rapid7 velociraptorRapid7 Velociraptor Notebooks Authenticated Persistent XSSCVE-2021-36193.5 Low