CVE-2026-85737 with a CVSS score of 6.5 is a missing authorization flaw in the www.velocidex.com/golang/velociraptor package's sql() VQL plugin. The plugin accepts caller-supplied driver, connection string, and query arguments and passes them to database/sql without invoking the runtime access checks used by sibling network plugins, even though its metadata declares FILESYSTEM_READ. An authenticated low-privilege user with ANY_QUERY, such as the built-in analyst, investigator, or api role, can use the notebook query API to run a MySQL or Postgres query against an attacker-controlled host. The attacker then uses MySQL LOAD DATA LOCAL INFILE to make the server read arbitrary local files, including root-readable configuration files containing CA, gateway, and frontend private keys, password hashes, and cross-tenant data. The same sink can also initiate arbitrary outbound TCP connections. Business impact is severe because disclosure of private keys permits certificate forgery and impersonation of the server to enrolled endpoints, while exposed credentials and tenant data undermine confidentiality, integrity, and trust in the deployment.
We recommend you to update www.velocidex.com/golang/velociraptor to version 0.77.3 or later.[/subscribe_to_unlock_form]
CVE-2026-85737 with a CVSS score of 6.5 is a missing authorization flaw in the www.velocidex.com/golang/velociraptor package's sql() VQL plugin. The plugin accepts caller-supplied driver, connection string, and query arguments and passes them to database/sql without invoking the runtime access checks used by sibling network plugins, even though its metadata declares FILESYSTEM_READ. An authenticated low-privilege user with ANY_QUERY, such as the built-in analyst, investigator, or api role, can use the notebook query API to run a MySQL or Postgres query against an attacker-controlled host. The attacker then uses MySQL LOAD DATA LOCAL INFILE to make the server read arbitrary local files, including root-readable configuration files containing CA, gateway, and frontend private keys, password hashes, and cross-tenant data. The same sink can also initiate arbitrary outbound TCP connections. Business impact is severe because disclosure of private keys permits certificate forgery and impersonation of the server to enrolled endpoints, while exposed credentials and tenant data undermine confidentiality, integrity, and trust in the deployment.
We recommend you to update www.velocidex.com/golang/velociraptor to version 0.77.3 or later.[emaillocker id="1283"]
The following reports contain further technical details:
[/emaillocker]