EUVD-2026-57068
GHSA-j6jv-j266-988h
Severity by source
AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Analyst credentials required (PR:L), crafting the VQL authorization-reset is non-trivial (AC:H), and investigator-level reach extends to other endpoints causing a scope change (S:C).
Primary rating from Vendor (rapid7).
CVSS VectorVendor: rapid7
Lifecycle Timeline
4DescriptionCVE.org
Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the authorization provider.
This allows a user who can run arbitrary VQL (usually with the "analyst" role) to launch new collections (usually requires the "investigator" role). This vulnerability is an escalation from an analyst to investigator role.
AnalysisAI
Privilege escalation in Velociraptor's notebook VQL execution path allows analyst-role users to bypass the COLLECT_CLIENT permission check and schedule new client collections, a capability normally restricted to the investigator role. The bypass is achieved by executing a VQL query that resets the authorization provider, collapsing the RBAC boundary between analyst and investigator roles. No public exploit has been identified at time of analysis, though the remediation commit is publicly visible on GitHub.
Technical ContextAI
Velociraptor is Rapid7's open-source endpoint visibility and digital forensics platform that uses VQL (Velociraptor Query Language) for interactive data collection and analysis. Notebooks in Velociraptor allow users to compose and execute VQL queries against connected endpoints and the server. The root cause is CWE-862 (Missing Authorization): the COLLECT_CLIENT permission check is not enforced when the VQL execution path triggers a reset of the internal authorization provider object. Because the authorization state can be manipulated via a crafted VQL query, the RBAC boundary between the 'analyst' role (can run arbitrary VQL) and the 'investigator' role (can schedule collections via COLLECT_CLIENT) is effectively nullified. The affected CPE is cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*, indicating all versions are in scope per the NVD entry. The fix commit (d7de958e846d3742a7a3a8538fd463e4f12fc528) restructures authorization handling in api/hunts.go and related API surfaces.
RemediationAI
Apply the upstream fix from commit d7de958e846d3742a7a3a8538fd463e4f12fc528 available at https://github.com/Velocidex/velociraptor/commit/d7de958e846d3742a7a3a8538fd463e4f12fc528; the exact patched release version should be confirmed against the official advisory at http://docs.velociraptor.app/announcements/advisories/cve-2026-64954/ as a formally tagged release was not confirmed from available data. As a compensating control prior to patching, restrict or remove notebook VQL execution access for analyst-role users - note this will degrade the analyst's core investigative workflow and should be treated as a temporary measure only. Additionally, audit VQL notebook execution logs for unusual collection-scheduling activity by analyst-role accounts to detect prior exploitation.
More in Velociraptor
View allDirectory traversal in Rapid7 Velociraptor servers running on Linux before 0.75.6 lets a rogue enrolled client upload a
Privilege escalation in Rapid7 Velociraptor lets any user permitted to schedule client monitoring artifacts run otherwis
Privilege escalation in Rapid7 Velociraptor allows an authenticated user holding only the 'investigator' role to execute
Privilege escalation to administrator in Rapid7 Velociraptor (all versions before 0.77.2) allows an authenticated low-pr
Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do
Privilege escalation in Velociraptor allows any user with the NOTEBOOK_EDIT permission - typically an analyst-level role
Rapid7 Velociraptor allows users to be created with different privileges on the server. Rated high severity (CVSS 8.8),
Privilege escalation in Rapid7 Velociraptor's multi-tenant org management allows child org administrators to delete any
Remote code execution in Rapid7 Velociraptor server (primarily Linux) allows authenticated clients to write malicious me
Cross-site scripting in Velociraptor's web GUI arises from unsanitized URL scheme handling in URL-typed table columns, e
Multi-tenancy authorization bypass in Velociraptor before 0.76.3 allows authenticated GUI users to execute VQL queries a
Template injection in Velociraptor's notebook backup restoration pipeline allows a low-privileged NOTEBOOK_EDITOR user t
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allVendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.0 | Affected |
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| openSUSE Leap 16.0 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today