EUVD-2026-56180
GHSA-46vh-7xwv-8rrp
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Local vector confirmed: attacker must deliver a crafted NTFS image to the target system; no network path or authentication required to trigger the parser during forensic ingestion.
Primary rating from Vendor (rapid7).
CVSS VectorVendor: rapid7
Lifecycle Timeline
2DescriptionCVE.org
Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images.
Typically Velociraptor's NTFS parser is used on live NTFS filesystems, limiting the opportunity of attackers corrupting the filesystem. However, in some applications (e.g. dead disk forensics https://docs.velociraptor.app/docs/forensic/deaddisk/ ) Velociraptor may be used on untrusted NTFS image files.
If an attacker is able to inject maliciously corrupted NTFS Volumes they can cause a crash and a Denial of Service.
AnalysisAI
Velociraptor's NTFS parsing library contains out-of-bounds read and memory exhaustion flaws that allow a crash and denial of service when processing maliciously crafted NTFS images. All versions of Rapid7's Velociraptor (cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*) are affected, with meaningful exposure limited to dead disk forensics workflows where untrusted NTFS images are ingested - live filesystem analysis is largely insulated from this attack path. No public exploit code and no confirmed active exploitation have been identified at time of analysis; the local attack vector further constrains real-world exploitation opportunity.
Technical ContextAI
Velociraptor is an open-source digital forensics and incident response (DFIR) platform by Rapid7 that includes a native NTFS parsing library for artifact collection from Windows filesystems. The root cause is CWE-125 (Out-of-Bounds Read): the NTFS parser fails to validate bounds when processing NTFS volume metadata structures - such as MFT entries, attribute headers, or index records - allowing out-of-bounds reads and memory exhaustion conditions when encountering malformed data. The 'Buffer Overflow' tag associated with this CVE suggests related memory safety deficiencies in the same parsing code path. The vulnerability is specifically triggered during raw NTFS image ingestion as used in the dead disk forensics workflow (documented at https://docs.velociraptor.app/docs/forensic/deaddisk/), where Velociraptor reads from an untrusted disk image rather than a mounted live filesystem. CPE data confirms all versions under cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:* are within scope.
RemediationAI
Consult the Rapid7 Velociraptor advisory at http://docs.velociraptor.app/announcements/advisories/cve-2026-17535/ for the official patched version - no exact fix version was available in the provided intelligence data, so the advisory is the authoritative source for patch confirmation. As a compensating control, restrict dead disk forensics workflows to trusted, chain-of-custody-verified NTFS images only, and avoid ingesting images from attacker-influenced or unverified sources. If untrusted disk image analysis is operationally required, process within an isolated environment such as a dedicated VM or container so that a crash is contained and does not disrupt broader investigation infrastructure. Temporarily disabling or gating access to the dead disk forensics feature until a patch is applied reduces exposure, though this limits forensic capability and should be weighed against operational needs.
More in Velociraptor
View allPrivilege escalation in Velociraptor's notebook VQL execution path allows analyst-role users to bypass the COLLECT_CLIEN
Directory traversal in Rapid7 Velociraptor servers running on Linux before 0.75.6 lets a rogue enrolled client upload a
Privilege escalation in Rapid7 Velociraptor lets any user permitted to schedule client monitoring artifacts run otherwis
Privilege escalation in Rapid7 Velociraptor allows an authenticated user holding only the 'investigator' role to execute
Privilege escalation to administrator in Rapid7 Velociraptor (all versions before 0.77.2) allows an authenticated low-pr
Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do
Privilege escalation in Velociraptor allows any user with the NOTEBOOK_EDIT permission - typically an analyst-level role
Rapid7 Velociraptor allows users to be created with different privileges on the server. Rated high severity (CVSS 8.8),
Privilege escalation in Rapid7 Velociraptor's multi-tenant org management allows child org administrators to delete any
Remote code execution in Rapid7 Velociraptor server (primarily Linux) allows authenticated clients to write malicious me
Cross-site scripting in Velociraptor's web GUI arises from unsanitized URL scheme handling in URL-typed table columns, e
Multi-tenancy authorization bypass in Velociraptor before 0.76.3 allows authenticated GUI users to execute VQL queries a
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.0 | Affected |
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| openSUSE Leap 16.0 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today