EUVD-2026-64703
GHSA-jj5c-prr4-v82g
Severity by source
AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
PR:L reflects NOTEBOOK_EDIT analyst role requirement; UI:R because full endpoint impact requires a privileged user to trigger the overwritten artifact; S:C as artifacts execute on managed endpoint agents.
Primary rating from Vendor (rapid7).
CVSS VectorVendor: rapid7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
Lifecycle Timeline
4DescriptionCVE.org
The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an implementation fault in this VQL function, the global artifact repository is used which allows callers to overwrite existing artifacts without the required permissions. The attacker need only have the NOTEBOOK_EDIT permission (e.g. an analyst role) to be able to call this function.
AnalysisAI
Privilege escalation in Velociraptor allows any user with the NOTEBOOK_EDIT permission - typically an analyst-level role - to overwrite global artifacts without the elevated permissions normally required for such operations. The verify() VQL function, designed only for syntax validation, incorrectly writes submitted artifacts into the shared global repository rather than a temporary local scope, effectively bypassing authorization controls (CWE-862). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the attacker hold the NOTEBOOK_EDIT permission within the Velociraptor server - this permission is granted by default to the analyst role and is the minimum required to call the `verify()` VQL function from a notebook context. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 score of 8.9 (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L) accurately reflects a high-severity authorization bypass with a changed scope - the S:C metric indicates that exploitation can cascade from the Velociraptor server to the managed endpoints on which artifacts are subsequently executed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An analyst with NOTEBOOK_EDIT permission crafts a malicious artifact definition - for example, a backdoored version of Windows.System.PowerShell with an injected VQL payload - and calls `verify()` from a Velociraptor notebook, silently overwriting the legitimate global artifact. When an operator or administrator subsequently schedules that artifact for collection on managed Windows endpoints, the injected VQL executes with agent-level privileges, enabling data exfiltration or command execution on endpoint hosts. |
| Remediation | Consult the vendor advisory at http://docs.velociraptor.app/announcements/advisories/cve-2026-19200/ and apply the patched Velociraptor release once published - the upstream fix in PR #4962 scopes the `verify()` function to a local repository, preventing writes to the global artifact store. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Velociraptor users granted NOTEBOOK_EDIT permission and audit whether your deployment runs an affected version (confirm with vendor if version status is unclear). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Velociraptor
View allPrivilege escalation in Velociraptor's notebook VQL execution path allows analyst-role users to bypass the COLLECT_CLIEN
Privilege escalation to administrator in Rapid7 Velociraptor (all versions before 0.77.2) allows an authenticated low-pr
Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do
Rapid7 Velociraptor allows users to be created with different privileges on the server. Rated high severity (CVSS 8.8),
Privilege escalation in Rapid7 Velociraptor's multi-tenant org management allows child org administrators to delete any
Remote code execution in Rapid7 Velociraptor server (primarily Linux) allows authenticated clients to write malicious me
Cross-site scripting in Velociraptor's web GUI arises from unsanitized URL scheme handling in URL-typed table columns, e
We need to produce a JSON object with all specified fields, based on provided data. The CVE is CVE-2026-6290, about Velo
Cross-organization ACL disclosure in Velocidex Velociraptor before 0.76.5 allows any authenticated low-privilege user to
Account takeover in Rapid7 Velociraptor is possible when the platform is configured to use an external OIDC Identity Pro
Out-of-bounds read and memory exhaustion flaws in Velociraptor's NTFS parsing library allow denial of service when proce
Path traversal in Velociraptor's NewNotebook API allows authenticated users holding NOTEBOOK_EDIT permission to write fi
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today