CVE-2026-19584

Name of the Vulnerable Software and Affected Versions Velociraptor (affected versions not specified)

Description The default daily backup feature allows for the creation of notebook backups. During the restoration process, notebook cell content is interpolated into a template without Access Control List (ACL) checks. This flaw enables a user with NOTEBOOK EDITOR permissions to embed a VQL (Velociraptor Query Language) query that executes with elevated privileges upon the restoration of the notebook backup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.