EUVD-2026-57161
GHSA-9qrg-7832-x9w4
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Network-accessible GUI requires root-org authentication (PR:H); read-only cross-tenant path traversal yields C:H with no integrity or availability impact.
Primary rating from Vendor (rapid7).
CVSS VectorVendor: rapid7
Lifecycle Timeline
3DescriptionCVE.org
Velociraptor allows reading Stacked result sets from the GUI. Velociraptor's multi-tenant design stores sub orgs within the datastore directory. The path requested by the GUI is not correctly checked against the prefix deny list, allowing result sets to read from denied prefixes.
In particular, a user with read access to the root org can access result sets from child orgs.
AnalysisAI
Cross-tenant data exposure in Velociraptor's multi-tenant GUI allows authenticated root-org users to read Stacked result sets belonging to child organizations by bypassing the prefix deny list that enforces datastore path isolation. The GUI endpoint that serves result sets does not correctly validate requested paths against the deny list, so a crafted request can resolve to a sub-org datastore directory the requester should not have access to. No public exploit has been identified and exploitation requires existing high-privilege authenticated access, but the confidentiality impact is significant in shared DFIR environments where tenant isolation is a core security guarantee.
Technical ContextAI
Velociraptor is an open-source Digital Forensics and Incident Response (DFIR) and threat-hunting platform developed by Rapid7 that supports a multi-tenant architecture. In multi-tenant mode, child organizations (sub-orgs) are stored as subdirectories within the server-side datastore directory tree. The GUI feature for reading 'Stacked result sets' - aggregated artifact collection or hunt outputs - constructs a datastore path from the user-supplied request. The root cause is CWE-862 (Missing Authorization): the server-side handler does not correctly validate the requested path against the prefix deny list that is intended to prevent root-org users from crossing into child-org namespace prefixes. Because the sub-org directories are children of the shared datastore root, a path that partially matches but does not fully satisfy the deny list check can resolve to child-org data, breaking the tenant isolation boundary.
RemediationAI
The primary remediation is to apply the vendor-released patch documented in the Rapid7 Velociraptor advisory at http://docs.velociraptor.app/announcements/advisories/cve-2026-18652/ - the exact fixed version is not confirmed from available intelligence and must be retrieved directly from that advisory. As a compensating control pending patching, administrators should restrict root-org GUI access to the minimum set of fully trusted personnel, reducing the population of users who could exploit the prefix deny list bypass; note that this control depends on the principle of least privilege already being enforced and does not eliminate the underlying flaw. Organizations that have not configured any child organizations in their Velociraptor instance face no cross-tenant exposure from this specific vulnerability and can schedule patching according to normal maintenance windows rather than treating this as emergency remediation.
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today