Executive brief
Rapid7 Velociraptor is an open-source digital forensics and incident response platform used by security analysts to collect and analyze data from computers. A vulnerability in how it processes certain collection files allows an attacker to provide a malicious data package that, when opened by an analyst, executes unauthorized commands on the analyst's own computer. This could lead to a full compromise of the investigator's workstation and the sensitive data it contains.
Technical details
A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor. The root cause is the lack of proper escaping when the 'hostname' field from 'client_info.json' (within a collection ZIP) is inserted into a YAML template using Go's 'text/template' engine. An attacker can craft a hostname containing literal double quotes and newlines to break out of the YAML string and inject a new mount remapping entry. When an analyst uses the '--remap' flag to apply this generated file, the injected VQL executes with 'NullACLManager' privileges, granting unsandboxed, full-permission code execution on the analyst's local system. The issue is fixed in version 0.76.6.
Affected products
- Rapid7 Velociraptor before 0.76.6
Timeline
- 2026-06-04: advisory: Vendor advisory published
- 2026-06-09: disclosed: NVD publication date