CVE-2026-19584 Velociraptor VQL injection during notebook restore from backup
A malicious user with notebook editor permissions can inject VQL code into backups, leading to elevated code execution during restoration.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-19584?
CVE-2026-19584 is a high-severity code injection vulnerability in Rapid7 Velociraptor, published on 10 Sep 2026. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOK_EDITOR permission to plant a VQL query which will be evaluated at elevated permissions if the notebook's backup is subsequently restored.
Which versions are affected by CVE-2026-19584?
How do I fix CVE-2026-19584?
No fix has been published for CVE-2026-19584 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-19584 being exploited?
There is no known exploitation of CVE-2026-19584 in the wild and no public exploit code.
Sources
Also known as GHSA-52wr-g3vp-7h6v.