EUVD-2026-55961
GHSA-qx94-26r3-gv6g
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Analyst is a low-privilege authenticated role (not admin), so PR:L is more accurate; S:C and C:L reflect the server-side outbound network oracle reaching beyond the vulnerable component.
Primary rating from Vendor (rapid7).
CVSS VectorVendor: rapid7
Lifecycle Timeline
3DescriptionCVE.org
Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.
AnalysisAI
Missing NETWORK ACL enforcement across Velociraptor's upload_azure, upload_sftp, upload_smb, upload_gcs, and related VQL plugins allows an authenticated analyst-role user to force the server to initiate outbound TCP connections to arbitrary attacker-controlled endpoints. This bypasses the intended NETWORK ACL permission boundary - a role separation control designed to prevent analysts from triggering server-side network activity - enabling port-oracle-based reconnaissance of the server's internal network segments and potential data exfiltration to external destinations. No public exploit code or CISA KEV listing has been identified at time of analysis; exploitation is bounded by the requirement for analyst-role authentication.
Technical ContextAI
Velociraptor is an open-source digital forensics and incident response (DFIR) platform developed by Rapid7 (Velocidex), which uses Velociraptor Query Language (VQL) as its query and automation engine. VQL plugins including upload_azure, upload_sftp, upload_smb, upload_gcs, gcs_pubsub_publish, and the SMB and SSH filesystem accessors perform outbound network operations to cloud storage and file-sharing services. The platform enforces access controls through a discrete ACL system with named permissions such as NETWORK and FILESYSTEM_READ, enforced at runtime via vql_subsystem.CheckAccess() calls. CWE-863 (Incorrect Authorization) applies because the NETWORK ACL check was entirely absent from these plugins' execution paths - an analyst-role caller could invoke network-initiating functions without the runtime ever verifying possession of the NETWORK grant. The corrective commit (48824fb51a2bdba832abc281e719ecbed74736df) retrofits explicit CheckAccess(scope, acls.NETWORK) guards at each affected function's entry point and updates plugin metadata to declare NETWORK as a required permission, closing the gap between declared intent and runtime enforcement across at least seven affected source files.
RemediationAI
The upstream fix is available in commit 48824fb51a2bdba832abc281e719ecbed74736df on the Velocidex/velociraptor GitHub repository; however, a specific tagged release version containing this fix has not been independently confirmed from available data - operators should consult the vendor advisory at http://docs.velociraptor.app/announcements/advisories/cve-2026-18348/ to identify the patched release version and upgrade to it. As an immediate compensating control prior to patching, administrators should audit all analyst-role accounts and revoke access for any account that does not operationally require the upload VQL plugins; removing upload_azure, upload_sftp, upload_smb, upload_gcs, and gcs_pubsub_publish artifacts from the VQL artifact library accessible to analyst-role users eliminates the exploitation path without a software update, though this will impact legitimate data-offload workflows and should be weighed accordingly. Deploying egress firewall rules on the Velociraptor server host that restrict outbound connections to an approved allowlist of destinations provides a defense-in-depth layer that limits the port oracle and exfiltration impact even if the VQL call is successfully invoked, with the trade-off that overly restrictive egress rules may break legitimate upload workflows to approved cloud destinations.
More in Velociraptor
View allPrivilege escalation in Velociraptor's notebook VQL execution path allows analyst-role users to bypass the COLLECT_CLIEN
Directory traversal in Rapid7 Velociraptor servers running on Linux before 0.75.6 lets a rogue enrolled client upload a
Privilege escalation in Rapid7 Velociraptor lets any user permitted to schedule client monitoring artifacts run otherwis
Privilege escalation in Rapid7 Velociraptor allows an authenticated user holding only the 'investigator' role to execute
Privilege escalation to administrator in Rapid7 Velociraptor (all versions before 0.77.2) allows an authenticated low-pr
Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do
Privilege escalation in Velociraptor allows any user with the NOTEBOOK_EDIT permission - typically an analyst-level role
Rapid7 Velociraptor allows users to be created with different privileges on the server. Rated high severity (CVSS 8.8),
Privilege escalation in Rapid7 Velociraptor's multi-tenant org management allows child org administrators to delete any
Remote code execution in Rapid7 Velociraptor server (primarily Linux) allows authenticated clients to write malicious me
Cross-site scripting in Velociraptor's web GUI arises from unsanitized URL scheme handling in URL-typed table columns, e
Multi-tenancy authorization bypass in Velociraptor before 0.76.3 allows authenticated GUI users to execute VQL queries a
Same weakness CWE-863 – Incorrect Authorization
View allSame technique Authentication Bypass
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.0 | Affected |
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| openSUSE Leap 16.0 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today