# CVE-2026-18348: Velociraptor NETWORK ACL bypass in upload_azure, upload_sftp, and upload_smb

Source: https://junglewise.ai/threats/cve-2026-18348-velociraptor-network-acl-bypass-in-upload-azure-upload-sftp-and  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-18348 · Severity: medium · CVSS 4.1 · Published 2026-08-11

Velociraptor is a forensic and incident response platform that allows authorized analysts to perform system investigations and data collection. An authenticated analyst-role user can exploit missing permission checks in three upload plugins to initiate outbound network connections from the server without proper authorization, potentially enabling internal network reconnaissance and data exfiltration to external hosts.

Technologies: [Velocidex Velociraptor](https://junglewise.ai/threats/technologies/velociraptor). Vendors: [Velocidex](https://junglewise.ai/threats/vendors/velocidex).

## Quick answers

**Is CVE-2026-18348 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-18348 being exploited in the wild.

**How severe is CVE-2026-18348?** Medium severity, with a CVSS score of 4.1, published 11 August 2026.

**Which products and versions are affected?** Velocidex Velociraptor prior to 0.77.2.

**Is there a fix for CVE-2026-18348?** A patch was published on 2026-07-27: Fix committed; release 0.77.2 recommended Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-18348 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-18348?** Check whether you run Velocidex Velociraptor at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a missing authorization check (CWE-862) in the upload_azure, upload_sftp, and upload_smb VQL plugins. These plugins fail to validate the NETWORK ACL permission before initiating network connections, allowing authenticated analyst-role users to bypass the intended authorization boundary. An attacker with analyst-level access can leverage these plugins to perform port scanning and network reconnaissance of internal systems or establish data exfiltration channels to external endpoints. The issue was patched in version 0.77.2 by adding proper CheckAccess() calls for the NETWORK permission in affected functions, as demonstrated in commit 48824fb.

## Affected products

- Velocidex Velociraptor prior to 0.77.2

## Timeline

- 2026-08-11: disclosed
- 2026-07-27: patched: Fix committed; release 0.77.2 recommended

## References

- [http://docs.velociraptor.app/announcements/advisories/cve-2026-18348/](http://docs.velociraptor.app/announcements/advisories/cve-2026-18348/)
- [https://github.com/Velocidex/velociraptor/commit/48824fb51a2bdba832abc281e719ecbed74736df](https://github.com/Velocidex/velociraptor/commit/48824fb51a2bdba832abc281e719ecbed74736df)

## Related threats

- [Velociraptor SQL plugin missing authorization checks](https://junglewise.ai/threats/cve-2026-85737-velociraptor-is-a-tool-for-collecting-host-based-state)
- [Velociraptor privilege escalation in Windows.Sysinternals.SysmonLogForward artifact](https://junglewise.ai/threats/cve-2026-78413-velociraptor-allows-collection-of-vql-queries-packaged-into)
- [Velociraptor deadlock condition in user management module](https://junglewise.ai/threats/cve-2026-77798-velociraptor-contains-a-deadlock-condition-that-may-be-triggered)
- [Velociraptor VQL injection in notebook backup restore](https://junglewise.ai/threats/cve-2026-19584-velociraptor-vql-injection-in-notebook-backup-restore)
- [Velociraptor permission bypass via client monitoring artifacts](https://junglewise.ai/threats/cve-2026-19583-velociraptor-permission-bypass-via-client-monitoring-artifacts)