CVE-2025-0914

Name of the Vulnerable Software and Affected Versions Velociraptor versions prior to 0.73.4

Description The issue is related to improper access control in the VQL shell feature, allowing authenticated users to execute the execve() plugin even when it is explicitly forbidden by the prevent execve flag in the configuration file. This setting is not commonly used, so the issue will only affect users who have set it.

Recommendations For versions prior to 0.73.4, update to release 0.73.4 to resolve the issue.