What’s Vulnerable › Products
Rapid7 Velociraptor vulnerabilities
44 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 35 published in the last 12 months.
Check whether your Rapid7 Velociraptor version is affected
Latest Rapid7 Velociraptor vulnerabilities
- CVE-2026-78413 — Velociraptor privilege escalation via SysmonLogForward client monitoring artifact (CVSS 5.5)
- CVE-2026-78411 — Velociraptor Server Metadata update with Insufficient Permission Check (CVSS 6.5)
- CVE-2026-78412 — WatchEvent API streams another organization's live events (CVSS 4.9)
- CVE-2026-77798 — Velociraptor Authenticated Denial of Service (CVSS 6.5)
- CVE-2026-77797 — Velociraptor Prefetch parser out of bounds (CVSS 3.6)
- CVE-2026-19072 — Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal (CVSS 9.9)
- CVE-2026-19584 — Velociraptor VQL injection during notebook restore from backup (CVSS 7.7)
- CVE-2026-19583 — Velociraptor Required Permissions bypass by using client monitoring queries (CVSS 9.9)
- CVE-2026-19200 — Velociraptor Analyst overwrites live built-in artifacts through verify() (CVSS 8.9)
- CVE-2026-15371 — Velociraptor Stored XSS in URL column types (CVSS 8.1)
- CVE-2026-64955 — Velociraptor CSV Formula Injection in Export Pipeline (CVSS 6.1)
- CVE-2026-64952 — Velociraptor Hunt Deletion With Insufficient Permission Check (CVSS 6.5)
- CVE-2026-64951 — Velociraptor DoS triggered by Divide by Zero panic (CVSS 3.5)
- CVE-2026-18652 — Velociraptor STACK Type Download Path Bypasses Denied Prefix Check (CVSS 6.5)
- CVE-2026-64954 — Velociraptor collect_client() Permissions Bypass (CVSS 8.2)
- CVE-2026-18640 — Velociraptor directory traversal via the NewNotebook API (CVSS 7.1)
- CVE-2026-18639 — Velociraptor OIDC Authenticator susceptible to email spoofing (CVSS 7.3)
- CVE-2026-18638 — Velociraptor server crash via the SetPassword API (CVSS 6.5)
- CVE-2026-18860 — Velociraptor incorrect Org deletion permissions check (CVSS 8.7)
- CVE-2026-18636 — Velociraptor VFSGetBuffer API path deny list bypass (CVSS 6.8)
- CVE-2026-18635 — Velociraptor query plugin allows impersonation in other orgs (CVSS 7.2)
- CVE-2026-17535 — Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes (CVSS 6.2)
- CVE-2026-18972 — Velociraptor authenticated identity-spoofing vulnerability (CVSS 9.6)
- CVE-2026-18348 — Velociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL plugins (CVSS 4.1)
- CVE-2026-8795 — (CVSS 7.8)