# Rapid7 Velociraptor.

Every CVE that names Rapid7 Velociraptor among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Velociraptor privilege escalation via SysmonLogForward client monitoring artifact](https://agentprime.io/advisories/CVE-2026-78413.md)
  `CVE-2026-78413` · CVE record: Rapid7 Velociraptor · CVSS 5.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Broken access control
- [Velociraptor Server Metadata update with Insufficient Permission Check](https://agentprime.io/advisories/CVE-2026-78411.md)
  `CVE-2026-78411` · CVE record: Rapid7 Velociraptor · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Broken access control
- [WatchEvent API streams another organization's live events](https://agentprime.io/advisories/CVE-2026-78412.md)
  `CVE-2026-78412` · CVE record: Rapid7 Velociraptor · CVSS 4.9 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Broken access control
- [Velociraptor Authenticated Denial of Service](https://agentprime.io/advisories/CVE-2026-77798.md)
  `CVE-2026-77798` · CVE record: Rapid7 Velociraptor · CVSS 6.5 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Denial of service
- [Velociraptor Prefetch parser out of bounds](https://agentprime.io/advisories/CVE-2026-77797.md)
  `CVE-2026-77797` · CVE record: Rapid7 Velociraptor · CVSS 3.6 Low · Not analysed yet · Published 24 Sept 2026 · Tags: Memory corruption, CWE-20
- [Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal](https://agentprime.io/advisories/CVE-2026-19072.md)
  `CVE-2026-19072` · CVE record: Rapid7 Velociraptor · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-164, CWE-1269
- [Velociraptor VQL injection during notebook restore from backup](https://agentprime.io/advisories/CVE-2026-19584.md)
  `CVE-2026-19584` · CVE record: Rapid7 Velociraptor · CVSS 7.7 High · Not analysed yet · Published 10 Sept 2026 · Tags: Code injection
- [Velociraptor Required Permissions bypass by using client monitoring queries](https://agentprime.io/advisories/CVE-2026-19583.md)
  `CVE-2026-19583` · CVE record: Rapid7 Velociraptor · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control
- [Velociraptor Analyst overwrites live built-in artifacts through verify()](https://agentprime.io/advisories/CVE-2026-19200.md)
  `CVE-2026-19200` · CVE record: Rapid7 Velociraptor · CVSS 8.9 High · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection, Broken access control
- [Velociraptor Stored XSS in URL column types](https://agentprime.io/advisories/CVE-2026-15371.md)
  `CVE-2026-15371` · CVE record: Rapid7 Velociraptor · CVSS 8.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-177
- [Velociraptor STACK Type Download Path Bypasses Denied Prefix Check](https://agentprime.io/advisories/CVE-2026-18652.md)
  `CVE-2026-18652` · CVE record: Rapid7 Velociraptor · CVSS 6.5 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control
- [Velociraptor DoS triggered by Divide by Zero panic](https://agentprime.io/advisories/CVE-2026-64951.md)
  `CVE-2026-64951` · CVE record: Rapid7 Velociraptor · CVSS 3.5 Low · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service
- [Velociraptor Hunt Deletion With Insufficient Permission Check](https://agentprime.io/advisories/CVE-2026-64952.md)
  `CVE-2026-64952` · CVE record: Rapid7 Velociraptor · CVSS 6.5 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control
- [Velociraptor CSV Formula Injection in Export Pipeline](https://agentprime.io/advisories/CVE-2026-64955.md)
  `CVE-2026-64955` · CVE record: Rapid7 Velociraptor · CVSS 6.1 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Other injection
- [Velociraptor collect_client() Permissions Bypass](https://agentprime.io/advisories/CVE-2026-64954.md)
  `CVE-2026-64954` · CVE record: Rapid7 Velociraptor · CVSS 8.2 High · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control
- [Velociraptor OIDC Authenticator susceptible to email spoofing](https://agentprime.io/advisories/CVE-2026-18639.md)
  `CVE-2026-18639` · CVE record: Rapid7 Velociraptor · CVSS 7.3 High · Not analysed yet · Published 11 Aug 2026 · Tags: Authentication bypass
- [Velociraptor server crash via the SetPassword API](https://agentprime.io/advisories/CVE-2026-18638.md)
  `CVE-2026-18638` · CVE record: Rapid7 Velociraptor · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption, CWE-703
- [Velociraptor directory traversal via the NewNotebook API](https://agentprime.io/advisories/CVE-2026-18640.md)
  `CVE-2026-18640` · CVE record: Rapid7 Velociraptor · CVSS 7.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: Path traversal
- [Velociraptor incorrect Org deletion permissions check](https://agentprime.io/advisories/CVE-2026-18860.md)
  `CVE-2026-18860` · CVE record: Rapid7 Velociraptor · CVSS 8.7 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-280
- [Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes](https://agentprime.io/advisories/CVE-2026-17535.md)
  `CVE-2026-17535` · CVE record: Rapid7 Velociraptor · CVSS 6.2 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption, Denial of service
- [Velociraptor VFSGetBuffer API path deny list bypass](https://agentprime.io/advisories/CVE-2026-18636.md)
  `CVE-2026-18636` · CVE record: Rapid7 Velociraptor · CVSS 6.8 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Authentication bypass
- [Velociraptor query plugin allows impersonation in other orgs](https://agentprime.io/advisories/CVE-2026-18635.md)
  `CVE-2026-18635` · CVE record: Rapid7 Velociraptor · CVSS 7.2 High · Not analysed yet · Published 11 Aug 2026 · Tags: Broken access control
- [Velociraptor authenticated identity-spoofing vulnerability](https://agentprime.io/advisories/CVE-2026-18972.md)
  `CVE-2026-18972` · CVE record: Rapid7 Velociraptor · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Authentication bypass
- [Velociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL plugins](https://agentprime.io/advisories/CVE-2026-18348.md)
  `CVE-2026-18348` · CVE record: Rapid7 Velociraptor · CVSS 4.1 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Broken access control
- [Injection in Rapid7 Velociraptor](https://agentprime.io/advisories/CVE-2026-8795.md)
  `CVE-2026-8795` · CVE record: Rapid7 Velociraptor · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Other injection, Code injection, CWE-116
- [Unbounded Memory Allocation in VQLResponse Result-Set Writer](https://agentprime.io/advisories/CVE-2026-6948.md)
  `CVE-2026-6948` · CVE record: Rapid7 Velociraptor · CVSS 4.9 Medium · Not analysed yet · Published 3 May 2026 · Tags: Denial of service
- [Rapid7 Velociraptor Improper Input Validation in Client Message Handler](https://agentprime.io/advisories/CVE-2026-5329.md)
  `CVE-2026-5329` · CVE record: Rapid7 Velociraptor · CVSS 8.5 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-20
- [Rapid7 Velociraptor Directory Traversal Vulnerability](https://agentprime.io/advisories/CVE-2025-14728.md)
  `CVE-2025-14728` · CVE record: Rapid7 Velociraptor · CVSS 6.8 Medium · Not analysed yet · Published 29 Dec 2025 · Tags: Path traversal
- [Velociraptor Shell Plugin Prevent_execve Bypass](https://agentprime.io/advisories/CVE-2025-0914.md)
  `CVE-2025-0914` · CVE record: Rapid7 Velociraptor · CVSS 3.8 Low · Not analysed yet · Published 27 Feb 2025 · Tags: CWE-281
- [Rapid7 Velociraptor Local Privilege Escalation In Windows Velociraptor Service](https://agentprime.io/advisories/CVE-2024-10526.md)
  `CVE-2024-10526` · CVE record: Rapid7 Velociraptor · CVSS 8.6 High · Not analysed yet · Published 7 Nov 2024 · Tags: Information disclosure, Broken access control
- [Rapid7 Velociraptor Reflected XSS](https://agentprime.io/advisories/CVE-2023-5950.md)
  `CVE-2023-5950` · CVE record: Rapid7 Velociraptor · CVSS 8.6 High · Not analysed yet · Published 6 Nov 2023 · Tags: Cross-site scripting (XSS)
- [Velociraptor crashes while parsing some malformed PE or OLE files.](https://agentprime.io/advisories/CVE-2023-2226.md)
  `CVE-2023-2226` · CVE record: Rapid7 Velociraptor · CVSS 3.3 Low · Not analysed yet · Published 21 Apr 2023 · Tags: Memory corruption
- [XSS in User Interface](https://agentprime.io/advisories/CVE-2022-35632.md)
  `CVE-2022-35632` · CVE record: Rapid7 Velociraptor · No CVSS score · Not analysed yet · Published 29 Jul 2022 · Tags: Cross-site scripting (XSS)
- [Filesystem race on temporary files](https://agentprime.io/advisories/CVE-2022-35631.md)
  `CVE-2022-35631` · CVE record: Rapid7 Velociraptor · No CVSS score · Not analysed yet · Published 29 Jul 2022 · Tags: CWE-377
- [Unsafe HTML Injection in Artifact Collection Report](https://agentprime.io/advisories/CVE-2022-35630.md)
  `CVE-2022-35630` · CVE record: Rapid7 Velociraptor · No CVSS score · Not analysed yet · Published 29 Jul 2022 · Tags: Cross-site scripting (XSS)
- [Velociraptor Client ID Spoofing](https://agentprime.io/advisories/CVE-2022-35629.md)
  `CVE-2022-35629` · CVE record: Rapid7 Velociraptor · No CVSS score · Not analysed yet · Published 29 Jul 2022 · Tags: Authentication bypass
- [Rapid7 Velociraptor Notebooks Authenticated Persistent XSS](https://agentprime.io/advisories/CVE-2021-3619.md)
  `CVE-2021-3619` · CVE record: Rapid7 Velociraptor · CVSS 3.5 Low · Not analysed yet · Published 17 Aug 2021 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=rapid7-velociraptor>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/rapid7-velociraptor/>. Everything for agents: <https://agentprime.io/llms.txt>.