EUVD-2026-56183
GHSA-jm4c-88wp-rfjq
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
PR:H reflects required child org admin credentials; S:C captures cross-org deletion impact; C:N because deletion does not expose confidential data.
Primary rating from Vendor (rapid7).
CVSS VectorVendor: rapid7
Lifecycle Timeline
4DescriptionCVE.org
Velociraptor allows multi-tenant deployments named "Orgs".
By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment.
Users can have different permissions in each org. To manage Orgs, Velociraptor usually examines the ORG_ADMIN permission on the ROOT org.
This issue results from the Velociraptor server allowing for the deletion of Orgs by incorrectly checking the ORG_ADMIN permission of callers within the calling ORG instead of the ROOT org. However, Org admins of child orgs were able to add this permission to their ACL token within their own org. This allows an administrator in a child org, which is not also an administrator in the ROOT org, to delete other orgs.
AnalysisAI
Privilege escalation in Rapid7 Velociraptor's multi-tenant org management allows child org administrators to delete any org in the deployment by exploiting a misplaced permission check. The server incorrectly validates the ORG_ADMIN permission against the caller's own child org rather than the ROOT org, and child org admins can self-grant this permission within their local ACL scope. An attacker with child org admin credentials can permanently delete peer orgs - including all their forensic artifacts, hunt data, and client configurations - well outside their authorized boundary.
Technical ContextAI
Velociraptor (cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*) is a Rapid7 DFIR endpoint visibility platform supporting multi-tenancy via 'Orgs,' where a ROOT org hosts isolated child orgs each with their own ACL context. The root cause aligns with CWE-280 (Improper Handling of Insufficient Permissions or Privileges): the org-deletion API handler resolves the caller's ORG_ADMIN permission against the calling org's ACL store rather than enforcing it at the ROOT org level as the authorization model requires. Because ACL tokens are independently scoped per org and child org admins have the ability to manage permissions within their own org, an attacker can self-assign ORG_ADMIN locally and then invoke the deletion endpoint against arbitrary peer orgs. The upstream code fix is tracked at GitHub commit dc38bd6a7e12a678cd79e726bdd1ded4eed75967 and described in the vendor advisory at https://docs.velociraptor.app/announcements/advisories/cve-2026-18860/.
RemediationAI
Apply the upstream fix available in GitHub commit dc38bd6a7e12a678cd79e726bdd1ded4eed75967 (https://github.com/Velocidex/velociraptor/commit/dc38bd6a7e12a678cd79e726bdd1ded4eed75967); a specific patched release version number is not independently confirmed from the provided data, so operators should consult the vendor advisory at https://docs.velociraptor.app/announcements/advisories/cve-2026-18860/ for the exact patched release. As a compensating control prior to patching, administrators should audit all child org ACL tokens and revoke any ORG_ADMIN grants from accounts that are not also authorized at the ROOT org level, noting that this control must be continuously enforced since child org admins retain the ability to re-grant the permission absent the code fix. Restricting child org admin roles to fully trusted personnel also reduces exposure, though this limits operational delegation and may not be feasible in large multi-tenant environments. Ensure backup and recovery procedures are in place for org data, as deletion is irreversible at the application layer.
More in Velociraptor
View allPrivilege escalation in Velociraptor's notebook VQL execution path allows analyst-role users to bypass the COLLECT_CLIEN
Directory traversal in Rapid7 Velociraptor servers running on Linux before 0.75.6 lets a rogue enrolled client upload a
Privilege escalation in Rapid7 Velociraptor lets any user permitted to schedule client monitoring artifacts run otherwis
Privilege escalation in Rapid7 Velociraptor allows an authenticated user holding only the 'investigator' role to execute
Privilege escalation to administrator in Rapid7 Velociraptor (all versions before 0.77.2) allows an authenticated low-pr
Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do
Privilege escalation in Velociraptor allows any user with the NOTEBOOK_EDIT permission - typically an analyst-level role
Rapid7 Velociraptor allows users to be created with different privileges on the server. Rated high severity (CVSS 8.8),
Remote code execution in Rapid7 Velociraptor server (primarily Linux) allows authenticated clients to write malicious me
Cross-site scripting in Velociraptor's web GUI arises from unsanitized URL scheme handling in URL-typed table columns, e
Multi-tenancy authorization bypass in Velociraptor before 0.76.3 allows authenticated GUI users to execute VQL queries a
Template injection in Velociraptor's notebook backup restoration pipeline allows a low-privileged NOTEBOOK_EDITOR user t
Same technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.0 | Affected |
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| openSUSE Leap 16.0 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today