CVE-2026-78411

Name of the Vulnerable Software and Affected Versions Velociraptor (affected versions not specified)

Description The SetClientMetadata() function uses an incorrect permission check when enforcing the setting of metadata on the server. This flaw allows a user possessing the LABEL CLIENTS permission to modify server metadata, which is typically used to store site-wide configuration data intended to be managed exclusively by the server administrator.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.