AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Rapid7CVE-2026-77797

Rapid7 Velociraptor: improper input validation

Rapid7

CVE-2026-77797 · Published Sep 24, 2026

Low3.6
Fix: upgrade to 0.77.3 or later
Rapid7 advisory

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files.

Affected versions

PackageAffectedFixed in
Velociraptor
Product
< 0.77.30.77.3
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-20, CWE-125

More Rapid7 advisories

All Rapid7
Low 2.7Sep 25Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query...CVE-2026-97228fixed in 0.6.2High 7.8Sep 24Rapid7 Insight Agent: code executionCVE-2026-89325no fix yetMedium 6.5Sep 24Velociraptor contains a deadlock conditionCVE-2026-77798fixed in 0.77.2Critical 9.9Sep 24Velociraptor stores the compiled VQL in the hunt object internally to avoid...CVE-2026-19072fixed in 0.77.2High 7.7Sep 10Rapid7 Velociraptor: code injectionCVE-2026-19584fixed in 0.77.2Critical 9.9Sep 10Rapid7 Velociraptor: insecure permissionsCVE-2026-19583fixed in 0.77.2