Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with only the reader role in the root organization (the lowest authenticated role, holding only READ_RESULTS permission ) can issue a single authenticated HTTP GET that can read any files from other orgs - even if they have no explicit permissions in the target org. However, the problem does not occur in reverse - a user with read access to a sub org is unable to read from other org or the root org.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-06 | 2 | Disclosure2 |
| 2026-05-07 | 1 | General1 |
الحمدلله اكتشفت ثلاث ثغرات امنية في نظام @velocidex التابع الى @rapid7 CVE-2026-6290 CVE-2026-6863 CVE-2026-6948 https://t.co/vFKrGR0jCK
Post summary
The post announces the discovery of three CVEs in Velocidex but offers no further detail, PoC, or claim of exploitation.
🚨*CVE* CVE-2026-6863 Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with only the reader role in the root organization (the … https://www.cve.org/CVERecord?id=CVE-2026-6863 ----- Traducción: CVE-2026-6863 Vel… http://infoflow.cloud`
Post summary
The message discloses CVE‑2026‑6863, a cross‑organization authorization bypass in Velociraptor’s HTTP API affecting versions before 0.76.4, but provides no PoC, exploit, active‑exploitation, or patch information.
CVE-2026-6863 Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with only the reader role in the root organization (the … https://www.cve.org/CVERecord?id=CVE-2026-6863
Post summary
Velociraptor versions prior to 0.76.4 are vulnerable to a cross‑organization authorization bypass, as documented on CVE‑org. The post provides technical details but no PoC, exploit code, or evidence of active exploitation.