CVE-2026-5329

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-5329
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-5329.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-5329
Published
2026-04-09T17:52:05.885Z
Modified
2026-07-15T01:49:05.323002687Z
Severity
  • 8.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Rapid7 Velociraptor Improper Input Validation in Client Message Handler
Details

Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in the client monitoring message handler on the Velociraptor server (primarily Linux) that allows an authenticated remote attacker to write to arbitrary internal server queues via a crafted monitoring message with a malicious queue name. The server handler that receives client monitoring messages does not sufficiently validate the queue name supplied by the client, allowing a rogue client to write arbitrary messages to privileged internal queues. This may lead to remote code execution on the Velociraptor server. Rapid7 Hosted Velociraptor instances are not affected by this vulnerability.

Database specific 
{
    "cwe_ids": [
        "CWE-20"
    ],
    "cna_assigner": "rapid7",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/5xxx/CVE-2026-5329.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "last_affected": "0.76.3"
                },
                {
                    "last_affected": "0.74.6"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/velocidex/velociraptor

Affected ranges

Type
GIT
Repo
https://github.com/velocidex/velociraptor
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e657d636acc37961b85c60b23abdf231b34f861
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.75.6"
        }
    ]
}

Affected versions

0.*
0.2.1
0.2.2
0.2.3
0.2.4
0.2.5
0.2.6
0.2.7
0.2.8
0.2.9
v0.*
v0.1
v0.3.0
v0.3.1
v0.3.2
v0.3.3
v0.3.4
v0.3.5
v0.3.6
v0.3.7
v0.3.8
v0.3.9
v0.4.0
v0.4.1
v0.4.2
v0.4.3
v0.4.4
v0.4.5
v0.4.6
v0.4.7
v0.4.8
v0.4.9
v0.5.0
v0.5.1
v0.5.2
v0.5.3
v0.5.4
v0.5.5
v0.5.5-1
v0.5.6
v0.5.7
v0.5.8-rc1
v0.5.9-rc1
v0.6.0-rc1
v0.6.1-rc1
v0.6.2-rc1
v0.6.3-rc1
v0.6.4-rc1
v0.6.7-rc1
v0.6.8-rc1
v0.7.0
v0.7.0-rc1
v0.72
v0.73
v0.74
v0.75
v0.75.1
v0.75.2
v0.75.5
v0.75.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-5329.json"