VE
Product
Velociraptor
43
CVEs
0
On KEV
9.9
Max CVSS
3
New 30D
Severity mix
Critical 4High 11Medium 25Low 3
Watch
Add Velociraptor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18636 | 6.8 | Aug 11 | Velociraptor VFSGetBuffer API path deny list bypass Affected: before 0.77.2 |
| CVE-2026-6863 | 6.8 | May 6 | HTTP Filestore Endpoints Misapply Permissions Across Organizations Affected: before 0.76.4, 0.75.9 |
| CVE-2025-14728 | 6.8 | Dec 29 | Rapid7 Velociraptor Directory Traversal Vulnerability Affected: before 0.75.6 |
| CVE-2026-78411 | 6.5 | Oct 5 | Velociraptor Server Metadata update with Insufficient Permission Check Affected: before 0.77.3 |
| CVE-2026-77798 | 6.5 | Sep 24 | Velociraptor Authenticated Denial of Service Affected: before 0.77.2 |
| CVE-2026-18652 | 6.5 | Aug 12 | Velociraptor STACK Type Download Path Bypasses Denied Prefix Check Affected: before 0.77.2 |
| CVE-2026-64952 | 6.5 | Aug 12 | Velociraptor Hunt Deletion With Insufficient Permission Check Affected: before 0.77.2 |
| CVE-2026-18638 | 6.5 | Aug 11 | Velociraptor server crash via the SetPassword API Affected: before 0.77.2 |
| CVE-2026-5329 | 6.5 | Apr 9 | Rapid7 Velociraptor Improper Input Validation in Client Message Handler Affected: through 0.76.3; through 0.75.6; through 0.74.6 |
| CVE-2026-17535 | 6.2 | Aug 11 | Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes Affected: before 0.77.2 |
| CVE-2026-64955 | 6.1 | Aug 12 | Velociraptor CSV Formula Injection in Export Pipeline Affected: before 0.77.2 |
| CVE-2023-5950 | 6.1 | Nov 6 | Rapid7 Velociraptor versions prior to 0.7.0-4 suffer from a reflected cross site scripting vulnerability Affected: before 0.6.9-1; 0.7.0; 0.7.0; 0.7.0-3 |
| CVE-2022-35630 | 6.1 | Jul 29 | A cross-site scripting (XSS) issue in generating a collection report made it possible for malicious clients to inject JavaScript code into the static HTML file Affected: before 0.6.5-2 |
| CVE-2026-78413 | 5.5 | Oct 5 | Velociraptor privilege escalation via SysmonLogForward client monitoring artifact Affected: before 0.77.3 |
| CVE-2026-7572 | 5.5 | May 6 | Velociraptor EVTX Parser — Process Crash via Crafted .evtx File Affected: before 0.76.5 |
| CVE-2025-6264 | 5.5 | Jun 20 | Velociraptor priviledge escalation via UpdateConfig artifact Affected: before 0.74.3 |
| CVE-2022-35631 | 5.5 | Jul 29 | On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velociraptor client… Affected: before 0.6.5-2 |
| CVE-2022-35629 | 5.4 | Jul 29 | Due to a bug in the handling of the communication between the client and server, it was possible for one client, already registered with their own client ID, to send messages to… Affected: before 0.6.5-2 |
| CVE-2023-2226 | 5.3 | Apr 21 | Due to insufficient validation in the PE and OLE parsers in Rapid7's Velociraptor versions earlier than 0.6.8 allows attacker to crash Velociraptor during parsing of maliciously… Affected: before 0.6.8 |
| CVE-2026-78412 | 4.9 | Oct 5 | WatchEvent API streams another organization's live events Affected: before 0.77.3 |
| CVE-2026-6948 | 4.9 | May 3 | Unbounded Memory Allocation in VQLResponse Result-Set Writer Affected: before 0.76.4; before 0.75.9 |
| CVE-2022-35632 | 4.8 | Jul 29 | The Velociraptor GUI contains an editor suggestion feature that can display the description field of a VQL function, plugin or artifact Affected: before 0.6.5-2 |
| CVE-2021-3619 | 4.8 | Jul 22 | Rapid7 Velociraptor 0.5.9 and prior is vulnerable to a post-authentication persistent cross-site scripting (XSS) issue, where an authenticated user could abuse MIME filetype… Affected: before 0.6.0 |
| CVE-2023-0290 | 4.3 | Jan 18 | Rapid7 Velociraptor did not properly sanitize the client ID parameter to the CreateCollection API, allowing a directory traversal in where the collection task could be written Affected: before 0.6.7-5 |
| CVE-2026-18348 | 4.1 | Aug 11 | Velociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL plugins Affected: before 0.77.2 |
Showing 25