CVE-2026-18638 | Velociraptor up to 0.77.1 SetPassword Username resource consumption

A vulnerability was found in Velociraptor up to 0.77.1 and classified as critical. Affected by this vulnerability is the function SetPassword. Executing a manipulation of the argument Username can lead to resource consumption.

This vulnerability appears as CVE-2026-18638. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More