Vulnerabilities

TI-2026-67810 CVE-2026-78413 · GHSA-9q45-6cc2-4qjv

Privilege escalation in Velociraptor via SysmonLogForward artifact

LOW 24

Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00157 Published 2026-10-05 Fixed in 0.77.3 CWE-276

TI-2026-67776 CVE-2026-78411 · GHSA-gpw6-25f6-673m

LOW 28

Velociraptor's SetClientMetadata used the wrong permission check to enforce setting metadata on the server.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00185 Published 2026-10-05 Fixed in 0.77.3 CWE-863

TI-2026-67761 CVE-2026-78412 · GHSA-83qj-9c78-grhx

LOW 22

Velociraptor's WatchEvent gRPC API can specify the OrgId of the org from which events should be streamed.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00222 Published 2026-10-05 Fixed in 0.77.3 CWE-639