Vulnerability · Published Sep 10, 2026 · Assigned by rapid7

CVE-2026-19584Velociraptor VQL injection during notebook restore from backup

High 7.7

In plain English

A high-severity code injection in Velociraptor from Rapid7. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).

Severity (CVSS 3.1)7.7High

Exploit odds (30 days)0.3%top 75.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOK_EDITOR permission to plant a VQL query which will be evaluated at elevated permissions if the notebook's backup is subsequently restored.

Affected products (as reported)

Vendor	Product	Versions
Rapid7	Velociraptor	0 – before 0.77.2

Weakness: CWE-1336, CWE-94 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

References

Velociraptor Advisory CVE-2026-19584 vendor-advisory
Velociraptor Fix PR #4967 patch