Rapid7 Velociraptor Multiple Vulnerabilities, CVSS 8.5

CERT-Bund published security advisory WID-SEC-2026-1141 identifying multiple vulnerabilities in Rapid7 Velociraptor, an endpoint detection and response and digital forensics platform. Affected versions are those prior to 0.76.3 and 0.76.2. The vulnerabilities are rated CVSS 8.5 (high severity) with a temporal score of 7.4, and remote exploitation is possible. Successful exploitation could allow an authenticated remote attacker to bypass security measures, manipulate data, or potentially achieve arbitrary code execution.

Organizations using Rapid7 Velociraptor should immediately verify their installed version and update to 0.76.3 or later where technically feasible. Where immediate updates are not possible, compensating controls and mitigation measures referenced in the advisory should be applied to reduce attack surface. IT security teams should prioritize patching this EDR tool given its privileged position in endpoint monitoring infrastructure.