Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
www.velocidex.com/golang/velociraptor
Go
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin
CVE-2026-85737 · GHSA-9QQ5-422F-33C2
www.velocidex.com/golang/velociraptor
Go
Medium
Fix reported
2026-11-10
Velociraptor vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token
CVE-2026-6290 · GHSA-HV5G-26JG-PC45
Version ranges need review.
www.velocidex.com/golang/velociraptor
Go
Critical
No fix reported
2026-06-26
Velocidex Velociraptor has an off-by-one error
CVE-2026-7572 · GHSA-6CMP-QV2F-X97X
Version ranges need review.
www.velocidex.com/golang/velociraptor
Go
Medium
Fix reported
2026-06-25
Velocidex Velociraptor has an authorization bypass vulnerability
CVE-2026-7573 · GHSA-3C93-G9G6-P5J4
Version ranges need review.
www.velocidex.com/golang/velociraptor
Go
Medium
Fix reported
2026-06-25
Velocidex Velociraptor has an Incorrect Authorization issue
CVE-2026-6863 · GHSA-2V93-VP82-CJV8
Version ranges need review.
www.velocidex.com/golang/velociraptor
Go
Medium
Fix reported
2026-05-20
Velociraptor vulnerable to privilege escalation via UpdateConfig artifact
CVE-2025-6264 · GHSA-GPFC-MPH4-QM24
Version ranges need review.
www.velocidex.com/golang/velociraptor
Go
Medium
Fix reported
2026-03-03
Velociraptor vulnerable to Missing Authorization
CVE-2023-0242 · GHSA-G5VM-525Q-R66C
Version ranges need review.
www.velocidex.com/golang/velociraptor
Go
High
Fix reported
2026-03-03
Velociraptor subject to Path Traversal
CVE-2023-0290 · GHSA-7JF5-FVGF-48C6
Version ranges need review.
www.velocidex.com/golang/velociraptor
Go
Medium
Fix reported
2026-03-03
