An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the complete ACL policy (roles and permissions) for any user across all organizations by supplying targeted Name and Org parameters via a network request.
References
| Link | Resource |
|---|---|
| https://docs.velociraptor.app/announcements/advisories/cve-2026-7573/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
01 Jun 2026, 16:58
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:* |
|
| References | () https://docs.velociraptor.app/announcements/advisories/cve-2026-7573/ - Vendor Advisory | |
| First Time |
Linux
Rapid7 Linux linux Kernel Rapid7 velociraptor |
06 May 2026, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-06 03:15
Updated : 2026-06-01 16:58
NVD link : CVE-2026-7573
Mitre link : CVE-2026-7573
CVE.ORG link : CVE-2026-7573
JSON object : View
Products Affected
rapid7
- velociraptor
linux
- linux_kernel
CWE
CWE-639
Authorization Bypass Through User-Controlled Key