AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Rapid7CVE-2026-18972

Rapid7 Velociraptor: authentication bypass by spoofing

Rapid7

CVE-2026-18972 · Published Aug 11, 2026 · updated Aug 28, 2026

Critical9.6
Fix: upgrade to 0.77.2 or later
Rapid7 advisory

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-Metadata-USER\". This can lead to an account takeover attack from a user with low privileges to administrator.

Affected versions

PackageAffectedFixed in
Velociraptor
Product
< 0.77.20.77.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-290

More Rapid7 advisories

All Rapid7
Medium 6.5Aug 11Rapid7 Velociraptor: null pointer dereferenceCVE-2026-18638fixed in 0.77.2High 7.3Aug 11Rapid7 Velociraptor: authentication bypass by spoofingCVE-2026-18639fixed in 0.77.2High 7.1Aug 11Rapid7 Velociraptor: path traversalCVE-2026-18640fixed in 0.77.2High 7.2Aug 11Rapid7 Velociraptor: improper authorizationCVE-2026-18635fixed in 0.77.2Medium 6.8Aug 11Rapid7 Velociraptor: authentication bypassCVE-2026-18636fixed in 0.77.2High 8.7Aug 11Rapid7 Velociraptor: improper permission handlingCVE-2026-18860fixed in 0.77.2