7 matches found
CVE-2026-19072
Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiledcollectorargs" is an internal field, Velociraptor allowed the field to be set from a user API call. This allows another user who...
EUVD-2026-85870
Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiledcollectorargs" is an internal field, Velociraptor allowed the field to be set from a user API call. This allows another user who...
CVE-2026-19072 Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal
Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiledcollectorargs" is an internal field, Velociraptor allowed the field to be set from a user API call. This allows another user who...
CVE-2026-19072 Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal
Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiledcollectorargs" is an internal field, Velociraptor allowed the field to be set from a user API call. This allows another user who...
CVE-2026-19072 Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal
Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiledcollectorargs" is an internal field, Velociraptor allowed the field to be set from a user API call. This allows another user who...
CVE-2026-19072
The Velociraptor platform is vulnerable to a security bypass because it allows users to set the internal "compiled_collector_args" field via a user API call. This flaw allows a user with the minimal "investigator" role to inject compiled VQL statements for a hunt while bypassing standard ACL chec...
CVE-2026-19072: Product Released in Non-Release Configuration
Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiledcollectorargs" is an internal field, Velociraptor allowed the field to be set from a user API call. This allows another user who...