EUVD-2026-56184

The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOKEDIT permission to write the notebook record outside the org's data store directory. The file written must have an extension of ".json.db" but can otherwise overwrite other metadata files...

CVE-2026-18640 Velociraptor directory traversal via the NewNotebook API

The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOKEDIT permission to write the notebook record outside the org's data store directory. The file written must have an extension of ".json.db" but can otherwise overwrite other metadata files...

CVE-2026-18860 Velociraptor incorrect Org deletion permissions check

Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment. Users can have different permissions in each org. To manage Orgs, Velociraptor usually examines the ORGADMIN...

CVE-2026-18860 Velociraptor incorrect Org deletion permissions check

Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment. Users can have different permissions in each org. To manage Orgs, Velociraptor usually examines the ORGADMIN...

CVE-2026-18860

CVE-2026-18860 affects Velociraptor in multi-tenant deployments using Orgs. Root-level ORG_ADMIN checks are bypassed when a caller from a child Org with that permission can delete other Orgs because the system validates ORG_ADMIN in the calling Org instead of the ROOT Org. This allows an administ...

EUVD-2026-56183

Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment. Users can have different permissions in each org. To manage Orgs, Velociraptor usually examines the ORGADMIN...

EUVD-2026-56180

Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images. Typically Velociraptor's NTFS parser is used on live NTFS filesystems, limiting the opportunity of attackers corrupting the filesystem. However...

CVE-2026-17535 Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes

Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images. Typically Velociraptor's NTFS parser is used on live NTFS filesystems, limiting the opportunity of attackers corrupting the filesystem. However...

CVE-2026-17535 Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes

Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images. Typically Velociraptor's NTFS parser is used on live NTFS filesystems, limiting the opportunity of attackers corrupting the filesystem. However...

CVE-2026-17535

CVE-2026-17535 affects Velociraptor’s NTFS parsing library. It involves several out-of-bounds and memory-exhaustion bugs in the NTFS parser that may be triggered by maliciously crafted NTFS images. Impact is denial of service (crash) when processing bad NTFS volumes, with exposure possible when V...

EUVD-2026-56178

The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to...

CVE-2026-18636 Velociraptor VFSGetBuffer API path deny list bypass

The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to...

CVE-2026-18636

The CVE affects Velociraptor’s gRPC API (VFSGetBuffer) where a path-prefix denial check can be bypassed, enabling a user with ROOT read permission to access files in other orgs. The CVSS metrics indicate a NETWORK exploit with LOW complexity and HIGH confidentiality impact, requiring HIGH privile...

CVE-2026-18636 Velociraptor VFSGetBuffer API path deny list bypass

The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to...

EUVD-2026-56153

Velociraptor's VQL has a query plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have the IMPERSONATE permission usually only given to administrators. Velociraptor versions prior to 0.77.2 evaluate this...

CVE-2026-18635

CVE-2026-18635 concerns Velociraptor VQL’s query() plugin, where a caller with IMPERSONATE permission can run a query in a different org/user context. Prior to 0.77.2, the permission check evaluated the caller’s org instead of the target org, enabling an administrator in one org to impersonate a ...

CVE-2026-18635 Velociraptor query plugin allows impersonation in other orgs

Velociraptor's VQL has a query plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have the IMPERSONATE permission usually only given to administrators. Velociraptor versions prior to 0.77.2 evaluate this...

CVE-2026-18635 Velociraptor query plugin allows impersonation in other orgs

Velociraptor's VQL has a query plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have the IMPERSONATE permission usually only given to administrators. Velociraptor versions prior to 0.77.2 evaluate this...

CVE-2026-18972

CVE-2026-18972 describes an authenticated identity-spoofing flaw where an attacker can spoof another GUI user by sending a request with the Grpc-Metadata-USER header. This can enable account takeover from a low-privilege user to an administrator. The CVSS 3.1 vector in the document indicates high...

CVE-2026-18972 Velociraptor authenticated identity-spoofing vulnerability

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...