AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Rapid7CVE-2026-18348

Rapid7 Velociraptor: missing authorization

Rapid7

CVE-2026-18348 · Published Aug 11, 2026 · updated Aug 28, 2026

Medium4.1
Fix: upgrade to 0.77.2 or later
Rapid7 advisory

Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.

Affected versions

PackageAffectedFixed in
Velociraptor
Product
< 0.77.20.77.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-863

More Rapid7 advisories

All Rapid7
Medium 6.5Aug 11Rapid7 Velociraptor: null pointer dereferenceCVE-2026-18638fixed in 0.77.2High 7.3Aug 11Rapid7 Velociraptor: authentication bypass by spoofingCVE-2026-18639fixed in 0.77.2High 7.1Aug 11Rapid7 Velociraptor: path traversalCVE-2026-18640fixed in 0.77.2High 7.2Aug 11Rapid7 Velociraptor: improper authorizationCVE-2026-18635fixed in 0.77.2Medium 6.8Aug 11Rapid7 Velociraptor: authentication bypassCVE-2026-18636fixed in 0.77.2High 8.7Aug 11Rapid7 Velociraptor: improper permission handlingCVE-2026-18860fixed in 0.77.2