CVE-2026-19584— Velociraptor VQL injection during notebook restore from backup
Quick assessment
Affected
Rapid7 Velociraptor
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Velociraptor 默认启用了每日备份功能，允许创建笔记本（notebook）备份。当 Velociraptor 恢复备份时，笔记本单元格的内容会被插入到一个模板中进行渲染，但此过程未执行访问控制（ACL）检查。这使得拥有 NOTEBOOK_EDITOR 权限的恶意用户可以预置一条 VQL 查询语句；一旦该笔记本的备份被恢复，这条 VQL 查询将在提升的特权级别下被执行。
Possible ATT&CK Techniques 3 AI
T1105 · Ingress Tool Transfer T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-19584
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Velociraptor VQL injection during notebook restore from backup
Source: CVE Program / CVE List V5
Vulnerability Description
Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOK_EDITOR permission to plant a VQL query which will be evaluated at elevated permissions if the notebook's backup is subsequently restored.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1336
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Rapid7 | Velociraptor | 0 ~ 0.77.2 | - |
|
II. Public POCs for CVE-2026-19584
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19584
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-19584 (1)
Vendor Advisories for CVE-2026-19584 (1)
IV. Related Vulnerabilities
Same product: Velociraptor
-
CVE-2026-19583
Velociraptor Required Permissions bypass by using client mon -
CVE-2026-19200
Velociraptor Analyst overwrites live built-in artifacts thro -
CVE-2026-15371
Velociraptor Stored XSS in URL column types -
CVE-2026-18652
Velociraptor STACK Type Download Path Bypasses Denied Prefix -
CVE-2026-64951
Velociraptor DoS triggered by Divide by Zero panic
Same vendor: Rapid7
-
CVE-2026-19583
Velociraptor Required Permissions bypass by using client mon -
CVE-2026-16895
Authentication Bypass in Metasploit JSON-RPC Service When DB -
CVE-2026-19200
Velociraptor Analyst overwrites live built-in artifacts thro -
CVE-2026-15371
Velociraptor Stored XSS in URL column types -
CVE-2026-18652
Velociraptor STACK Type Download Path Bypasses Denied Prefix
Same weakness: CWE-1336
-
CVE-2026-87021
Tanium addressed an unauthorized code execution vulnerabilit -
CVE-2026-33387
Insufficient sanitization of Dashboards in Guardian/CMC befo -
CVE-2026-75650
Adobe Commerce | Improper Neutralization of Special Elements -
CVE-2026-52762
YesWiki: Authenticated (Admin) Server-Side Template Injectio -
CVE-2026-46636
Twig: Sandbox method allowlist bypass via `Markup` subclass
V. Comments for CVE-2026-19584
No comments yet