CVE-2026-19072 | Velociraptor up to 0.77.1 User API compiled_collector_args privileges management

A vulnerability labeled as very critical has been found in Velociraptor up to 0.77.1. Affected is an unknown function of the component User API. Executing a manipulation of the argument compiled_collector_args can lead to improper privilege management.

This vulnerability is tracked as CVE-2026-19072. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More