MEDIUM 4.1 NVD
CVE-2026-18348
Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-control
Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.
References
- http://docs.velociraptor.app/announcements/advisories/cve-2026-18348/
- https://github.com/Velocidex/velociraptor/commit/48824fb51a2bdba832abc281e719ecbed74736df
This medium severity vulnerability with a CVSS score of 4.1 was published on 2026-08-11 via NVD.
vulnfeed aggregates 10103 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.