High severity · published Sep 10, 2026
CVE-2026-19584
Velociraptor VQL injection during notebook restore from backup
7.7
CVSS
0.3%
EPSS
No
On KEV
Description
Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOK_EDITOR permission to plant a VQL query which will be evaluated at elevated permissions if the notebook's backup is subsequently restored.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VE
Velociraptor · Rapid7
before 0.77.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-19584
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-19584
docs.velociraptor.app
http://docs.velociraptor.app/announcements/advisories/cve-2026-19584/
github.com
https://github.com/Velocidex/velociraptor/pull/4967
More from Velociraptor
9.9
CVE-2026-19072
Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal
9.9
CVE-2026-19583
Velociraptor Required Permissions bypass by using client monitoring queries
9.6
CVE-2026-18972
Velociraptor authenticated identity-spoofing vulnerability
9.1
CVE-2026-6290
Velociraptor Query() Plugin Misapplies Permissions To Orgs
8.9
CVE-2026-19200
Velociraptor Analyst overwrites live built-in artifacts through verify()