Rapid7 Velociraptor CVE-2026-78411

Privilege escalation in Velociraptor's notebook VQL execution path allows analyst-role users to bypass the COLLECT_CLIEN

Directory traversal in Rapid7 Velociraptor servers running on Linux before 0.75.6 lets a rogue enrolled client upload a

Privilege escalation in Rapid7 Velociraptor lets any user permitted to schedule client monitoring artifacts run otherwis

Privilege escalation in Rapid7 Velociraptor allows an authenticated user holding only the 'investigator' role to execute

Privilege escalation to administrator in Rapid7 Velociraptor (all versions before 0.77.2) allows an authenticated low-pr

Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do

Privilege escalation in Velociraptor allows any user with the NOTEBOOK_EDIT permission - typically an analyst-level role

Rapid7 Velociraptor allows users to be created with different privileges on the server. Rated high severity (CVSS 8.8),

Privilege escalation in Rapid7 Velociraptor's multi-tenant org management allows child org administrators to delete any

Remote code execution in Rapid7 Velociraptor server (primarily Linux) allows authenticated clients to write malicious me

Cross-site scripting in Velociraptor's web GUI arises from unsanitized URL scheme handling in URL-typed table columns, e

Multi-tenancy authorization bypass in Velociraptor before 0.76.3 allows authenticated GUI users to execute VQL queries a