EUVD-2026-60571
GHSA-7wgv-gp5p-x4jc
Severity by source
AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
PR:H reflects required control over table data or column config; S:C captures XSS crossing into victim browser origin; no availability impact applies.
AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Primary rating from Vendor (rapid7).
CVSS VectorVendor: rapid7
Lifecycle Timeline
3DescriptionCVE.org
Velociraptor's web GUI allows specifying a custom type for columns in tables. The URL type takes the cell value and forms a URL which can be clicked in the GUI.The code does not limit the schemes allowed in this URL , allowing an attacker to specify a JavaScript scheme exposing the user to XSS.
AnalysisAI
Cross-site scripting in Velociraptor's web GUI arises from unsanitized URL scheme handling in URL-typed table columns, enabling a high-privileged attacker to inject javascript: URIs that execute when a second user clicks the crafted link in the console. The scope change (S:C) in the CVSS vector confirms the XSS crosses the application's security boundary into the victim's browser session, exposing session tokens and permitting authenticated actions on behalf of the victim. No public exploit code or CISA KEV listing has been identified at time of analysis, but the C:H/I:H impact scores reflect meaningful credential theft and session hijacking potential within the Velociraptor investigation console.
Technical ContextAI
Velociraptor (cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*) is Rapid7's open-source DFIR platform used by security teams for endpoint visibility, threat hunting, and incident response through a centralized web GUI. The GUI supports custom column types in query result tables, including a URL type that converts a cell's raw value into a rendered, clickable hyperlink. The root cause maps to CWE-177 (Improper Neutralization of URL Schemes in Hyperlinks): the rendering code does not validate or whitelist the URL scheme before constructing the hyperlink, permitting the javascript: scheme. When a user clicks such a link, the browser executes the payload as script within the authenticated console's origin, producing a stored or reflected XSS condition depending on how the cell value was introduced.
RemediationAI
Upgrade Velociraptor to the patched release identified in the vendor advisory at http://docs.velociraptor.app/announcements/advisories/cve-2026-15371/. The specific fixed version number is not independently confirmed in the current data - consult that advisory before targeting a particular release. As a compensating control prior to patching, restrict access to the Velociraptor web GUI to the minimum required set of users and enforce network-level access controls such as VPN or bastion-host gating, which limits the pool of potential victims for any session-hijacking payload. Audit existing table configurations to identify URL-typed columns and review their underlying data sources for externally influenced or untrusted cell values. Note that network access restrictions do not eliminate the vulnerability but reduce the realistic victim surface.
More in Velociraptor
View allPrivilege escalation in Velociraptor's notebook VQL execution path allows analyst-role users to bypass the COLLECT_CLIEN
Directory traversal in Rapid7 Velociraptor servers running on Linux before 0.75.6 lets a rogue enrolled client upload a
Privilege escalation in Rapid7 Velociraptor lets any user permitted to schedule client monitoring artifacts run otherwis
Privilege escalation in Rapid7 Velociraptor allows an authenticated user holding only the 'investigator' role to execute
Privilege escalation to administrator in Rapid7 Velociraptor (all versions before 0.77.2) allows an authenticated low-pr
Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do
Privilege escalation in Velociraptor allows any user with the NOTEBOOK_EDIT permission - typically an analyst-level role
Rapid7 Velociraptor allows users to be created with different privileges on the server. Rated high severity (CVSS 8.8),
Privilege escalation in Rapid7 Velociraptor's multi-tenant org management allows child org administrators to delete any
Remote code execution in Rapid7 Velociraptor server (primarily Linux) allows authenticated clients to write malicious me
Multi-tenancy authorization bypass in Velociraptor before 0.76.3 allows authenticated GUI users to execute VQL queries a
Template injection in Velociraptor's notebook backup restoration pipeline allows a low-privileged NOTEBOOK_EDITOR user t
Vendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.0 | Affected |
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| openSUSE Leap 16.0 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today