CVE-2026-18640 | Rapid7 Velociraptor up to 0.77.1 NewNotebook API permission

August 11, 2026 Yanac

A vulnerability was found in Rapid7 Velociraptor up to 0.77.1. It has been declared as problematic. This affects an unknown part of the component NewNotebook API. The manipulation results in permission issues.

This vulnerability is known as CVE-2026-18640. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More