EUVD-2026-21002
GHSA-3wq5-x8p8-2v3p
Severity by source
AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
5DescriptionCVE.org
Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in the client monitoring message handler on the Velociraptor server (primarily Linux) that allows an authenticated remote attacker to write to arbitrary internal server queues via a crafted monitoring message with a malicious queue name. The server handler that receives client monitoring messages does not sufficiently validate the queue name supplied by the client, allowing a rogue client to write arbitrary messages to privileged internal queues. This may lead to remote code execution on the Velociraptor server. Rapid7 Hosted Velociraptor instances are not affected by this vulnerability.
AnalysisAI
Remote code execution in Rapid7 Velociraptor server (primarily Linux) allows authenticated clients to write malicious messages to privileged internal queues via improper queue name validation. Affected versions prior to 0.76.2 (including 0.75.6, 0.74.6, and 0.76.1) are vulnerable to queue injection attacks from rogue authenticated clients. EPSS score of 0.20% (42nd percentile) suggests low broad exploitation probability, though SSVC framework indicates total technical impact despite no confirmed active exploitation. Vendor patch released as version 0.76.2.
Technical ContextAI
Velociraptor is a digital forensics and incident response (DFIR) endpoint visibility platform that uses a client-server architecture for collecting and analyzing endpoint data. This vulnerability exists in the server component's client monitoring message handler, which manages internal message queues for coordinating client activities. The affected handler implements insufficient input validation (CWE-20) on queue names supplied by clients in monitoring messages. In distributed agent-based architectures like Velociraptor, internal message queues are typically used for privileged operations like task distribution, result collection, and administrative functions. By failing to validate or sanitize client-supplied queue names, the server allows authenticated clients to specify arbitrary queue targets, effectively bypassing queue access controls. This primitive enables queue injection attacks where malicious clients can write crafted messages to privileged internal queues that should only be accessible to server processes or administrative components. The CPE identifier (cpe:2.3:a:rapid7:velociraptor) confirms this affects Rapid7's Velociraptor product specifically, with the Linux server environment noted as the primary affected platform.
RemediationAI
Upgrade immediately to Rapid7 Velociraptor version 0.76.2 or later, which implements proper queue name validation in the client monitoring message handler. Patch available from official Rapid7 channels and documented in vendor advisory at https://docs.velociraptor.app/announcements/advisories/cve-2026-5329/. If immediate upgrade is not feasible, implement compensating controls: (1) Review and restrict Velociraptor client authentication to only trusted, monitored endpoints-remove or rotate credentials for any potentially compromised clients, noting this may break legitimate monitoring workflows; (2) Deploy network segmentation to isolate Velociraptor server on dedicated management VLAN with strict ingress filtering allowing only known-good client IP ranges, though this reduces deployment flexibility for remote endpoints; (3) Enable comprehensive audit logging of all client monitoring messages and implement real-time alerting on unusual queue access patterns or message volumes from individual clients, accepting increased log storage and SIEM processing overhead; (4) If operationally acceptable, temporarily disable client-initiated monitoring features until patching is complete, recognizing this degrades core Velociraptor functionality. No compensating controls fully mitigate RCE risk-upgrade is the only complete remediation.
More in Velociraptor
View allPrivilege escalation in Velociraptor's notebook VQL execution path allows analyst-role users to bypass the COLLECT_CLIEN
Privilege escalation to administrator in Rapid7 Velociraptor (all versions before 0.77.2) allows an authenticated low-pr
Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do
Privilege escalation in Velociraptor allows any user with the NOTEBOOK_EDIT permission - typically an analyst-level role
Rapid7 Velociraptor allows users to be created with different privileges on the server. Rated high severity (CVSS 8.8),
Privilege escalation in Rapid7 Velociraptor's multi-tenant org management allows child org administrators to delete any
Cross-site scripting in Velociraptor's web GUI arises from unsanitized URL scheme handling in URL-typed table columns, e
We need to produce a JSON object with all specified fields, based on provided data. The CVE is CVE-2026-6290, about Velo
Cross-organization ACL disclosure in Velocidex Velociraptor before 0.76.5 allows any authenticated low-privilege user to
Account takeover in Rapid7 Velociraptor is possible when the platform is configured to use an external OIDC Identity Pro
Out-of-bounds read and memory exhaustion flaws in Velociraptor's NTFS parsing library allow denial of service when proce
Path traversal in Velociraptor's NewNotebook API allows authenticated users holding NOTEBOOK_EDIT permission to write fi
Same weakness CWE-20 – Improper Input Validation
View allVendor StatusVendor
SUSE
Severity: High| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.1 | Fixed |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Fixed |
Share
External POC / Exploit Code
Leaving vuln.today