Executive brief
Velociraptor vulnerable to privilege escalation via UpdateConfig artifact in www.velocidex.com/golang/velociraptor
Affected products
- Go www.velocidex.com/golang/velociraptor
Junglewise Threat Intelligence
CVE-2025-6264: GO-2025-3768 - Velociraptor vulnerable to privilege escalation via UpdateConfig artifact in www.velocidex.com/golang/velociraptor
CVE-2025-6264 · Severity: low · CVSS 3.1 · Published 2025-07-28
Technologies: www.velocidex.com/golang/velociraptor (Go). Vendors: Go.
Related threats
- Velocidex Velociraptor authorization bypass in HTTP API
- Velocidex Velociraptor authorization bypass in GetUserRoles API
- Velocidex Velociraptor denial of service in EVTX parser
- Velociraptor vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token
- GO-2023-1527 - Velociraptor vulnerable to Missing Authorization in www.velocidex.com/golang/velociraptor