Velocidex vulnerabilities
We track 3 vulnerabilities in Velocidex products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 6, 2026.
Latest Velocidex vulnerabilities
- 7.7 High severity
velociraptor: Authorization Bypass Through User-Controlled Key
An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the complete ACL policy (roles and permissions) for any user across all organizations
- 8.2 High severity
WinPmem: Out-of-bounds Write
Velocidex WinPmem versions below 4.1 suffer from an Out of Bounds Write vulnerability. By using an IO Control, a user space program can trick the driver into writing a 0 into any chosen memory location. In conjunction with information leakage from the WinPmem
- 7.3 High severity
WinPmem: Time-of-check Time-of-use (TOCTOU) Race Condition
Velocidex WinPmem versions 4.1 and below suffer from an Improper Input Validation vulnerability whereby an attacker with admin access can trigger a BSOD with a parallel thread changing the memory’s access right under the control of the user-mode application. T