VE
Product
Velociraptor
44
CVEs
0
On KEV
9.9
Max CVSS
3
New 30D
Severity mix
Critical 4High 12Medium 25Low 3
Watch
Add Velociraptor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18636 | 6.8 | Aug 11 | Velociraptor VFSGetBuffer API path deny list bypass Affected: before 0.77.2 |
| CVE-2026-6863 | 6.8 | May 6 | HTTP Filestore Endpoints Misapply Permissions Across Organizations Affected: before 0.76.4, 0.75.9 |
| CVE-2025-14728 | 6.8 | Dec 29 | Rapid7 Velociraptor Directory Traversal Vulnerability Affected: before 0.75.6 |
| CVE-2026-78411 | 6.5 | Oct 5 | Velociraptor Server Metadata update with Insufficient Permission Check Affected: before 0.77.3 |
| CVE-2026-77798 | 6.5 | Sep 24 | Velociraptor Authenticated Denial of Service Affected: before 0.77.2 |
| CVE-2026-18652 | 6.5 | Aug 12 | Velociraptor STACK Type Download Path Bypasses Denied Prefix Check Affected: before 0.77.2 |
| CVE-2026-64952 | 6.5 | Aug 12 | Velociraptor Hunt Deletion With Insufficient Permission Check Affected: before 0.77.2 |
| CVE-2026-18638 | 6.5 | Aug 11 | Velociraptor server crash via the SetPassword API Affected: before 0.77.2 |
| CVE-2026-5329 | 6.5 | Apr 9 | Rapid7 Velociraptor Improper Input Validation in Client Message Handler Affected: through 0.76.3; through 0.75.6; through 0.74.6 |
| CVE-2026-17535 | 6.2 | Aug 11 | Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes Affected: before 0.77.2 |
| CVE-2026-64955 | 6.1 | Aug 12 | Velociraptor CSV Formula Injection in Export Pipeline Affected: before 0.77.2 |
| CVE-2023-5950 | 6.1 | Nov 6 | Rapid7 Velociraptor Reflected XSS Affected: before 0.7.0-4 |
| CVE-2022-35630 | 6.1 | Jul 29 | Unsafe HTML Injection in Artifact Collection Report Affected: 0.6.5-2 before 0.6.5-2 |
| CVE-2026-78413 | 5.5 | Oct 5 | Velociraptor privilege escalation via SysmonLogForward client monitoring artifact Affected: before 0.77.3 |
| CVE-2026-7572 | 5.5 | May 6 | Velociraptor EVTX Parser — Process Crash via Crafted .evtx File Affected: before 0.76.5 |
| CVE-2025-6264 | 5.5 | Jun 20 | Velociraptor priviledge escalation via UpdateConfig artifact Affected: before 0.74.3 |
| CVE-2022-35631 | 5.5 | Jul 29 | Filesystem race on temporary files Affected: 0.6.5-2 before 0.6.5-2 |
| CVE-2022-35629 | 5.4 | Jul 29 | Velociraptor Client ID Spoofing Affected: 0.6.5-2 before 0.6.5-2 |
| CVE-2023-2226 | 5.3 | Apr 21 | Velociraptor crashes while parsing some malformed PE or OLE files. Affected: before 0.6.8 |
| CVE-2026-78412 | 4.9 | Oct 5 | WatchEvent API streams another organization's live events Affected: before 0.77.3 |
| CVE-2026-6948 | 4.9 | May 3 | Unbounded Memory Allocation in VQLResponse Result-Set Writer Affected: before 0.76.4; before 0.75.9 |
| CVE-2022-35632 | 4.8 | Jul 29 | XSS in User Interface Affected: 0.6.5-2 before 0.6.5-2 |
| CVE-2021-3619 | 4.8 | Jul 22 | Rapid7 Velociraptor 0.5.9 and prior is vulnerable to a post-authentication persistent cross-site scripting (XSS) issue, where an authenticated user could abuse MIME filetype… Affected: before 0.6.0 |
| CVE-2023-0290 | 4.3 | Jan 18 | Rapid7 Velociraptor directory traversal in client ID parameter Affected: before 0.6.7-5 |
| CVE-2026-18348 | 4.1 | Aug 11 | Velociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL plugins Affected: before 0.77.2 |
Showing 25