CVE-2026-18636
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
The Velociraptor gRPC API has a VFSGetBuffer endpoint that allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to access usually denied files. If the user has read permission in the ROOT org, this allows access to other orgs, in which the user may not have permission.
Risk Assessment
Risk of unauthorized access to sensitive files and data of other organizations, potentially leading to confidentiality breaches and tenant isolation failures.
Recommendation
Apply patches provided by Velociraptor vendor that fix the prefix check bypass. Restrict user permissions to the minimum and monitor access to the VFSGetBuffer endpoint.
Original NVD description (English source)
The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to access usually denied files. If the user has read permission in the ROOT org, this allows access to other orgs, in which the user may not have permission.