PT-2026-37339 · Velocidex · Velociraptor

Michaelddickenson · Published 2026-05-06 · Updated 2026-06-01 · CVE-2026-7573

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Velocidex Velociraptor versions prior to 0.76.5

Description An authorization bypass in the 'GetUserRoles' gRPC API endpoint allows any authenticated low-privilege user to retrieve the complete Access Control List (ACL) policy, including roles and permissions, for any user across all organizations. This is achieved by supplying targeted Name and Org parameters via a network request.

Recommendations Update to version 0.76.5 or later.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-7573

GHSA-3C93-G9G6-P5J4

Affected Products

Velociraptor

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-7573 · Security Note
• https://docs.velociraptor.app/announcements/advisories/cve-2026-7573 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3c93-g9g6-p5j4 · Vendor Advisory
• https://github.com/Velocidex/velociraptor · Note
• https://t.me/cveNotify/165494 · Telegram Post
• https://t.me/cveNotify/162283 · Telegram Post
• https://t.me/CVEtracker/52813 · Telegram Post