GHSA-3c93-g9g6-p5j4

ghsaUSosv

Velocidex Velociraptor has an authorization bypass vulnerability

view advisory published 2026-05-06Licence: CC-BY-4.0

An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the complete ACL policy (roles and permissions) for any user across all organizations by supplying targeted Name and Org parameters via a network request.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-7573US	high7.7	0.26% (17th)	—	2026-05-06
An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the c…

references

External citations — patches, advisories, analysis.

https://docs.velociraptor.app/announcements/advisories/cve-2026-7573WEB
https://github.com/Velocidex/velociraptorPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2026-7573ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan