Post
OffSequence
offseq.bsky.social
did:plc:t5t6qep2vfipbi7f54demwev
CRITICAL: Rapid7 Velociraptor <0.77.2 has a privilege escalation flaw (CVE-2026-19072, CVSS 9.9). 'Investigator' users can gain admin by injecting VQL. Upgrade to 0.77.2+ ASAP. https://radar.offseq.com/threat/cve-2026-19072-cwe-1269-product-released-in-non-release-configuration-in-rapid7-velocira...
https://radar.offseq.com/threat/cve-2026-19072-cwe-1269-product-released-in-non-release-configuration-in-rapid7-velociraptor-1faa73dd4a3adad9
2026-09-24T13:30:28.163Z