Attacker must have at least the investigator role and must be able to modify a notebook cell.
"}],"value":"Attacker must have at least the investigator role and must be able to modify a notebook cell."}],"credits":[{"lang":"en","type":"finder","value":"Yuval Miller"},{"lang":"en","type":"finder","value":"Leon Kayaliev"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOK_EDITOR permission to plant a VQL query which will be evaluated at elevated permissions if the notebook's backup is subsequently restored.
"}],"value":"Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOK_EDITOR permission to plant a VQL query which will be evaluated at elevated permissions if the notebook's backup is subsequently restored."}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1336","description":"CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-94","description":"CWE-94: Improper Control of Generation of Code ('Code Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-09-10T03:00:00.939Z","orgId":"9974b330-7714-4307-a722-5648477acda7","shortName":"rapid7"},"references":[{"name":"Velociraptor Advisory CVE-2026-19584","tags":["vendor-advisory"],"url":"http://docs.velociraptor.app/announcements/advisories/cve-2026-19584/"},{"name":"Velociraptor Fix PR #4967","tags":["patch"],"url":"https://github.com/Velocidex/velociraptor/pull/4967"}],"source":{"discovery":"EXTERNAL"},"title":"Velociraptor VQL injection during notebook restore from backup","workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Inspect the backup zip before restoring it to ensure it does not include malicious notebook contents. Do not automatically restore backup from untrusted sources.
"}],"value":"Inspect the backup zip before restoring it to ensure it does not include malicious notebook contents. Do not automatically restore backup from untrusted sources."}],"x_generator":{"engine":"Rapid7 Vulnerability Disclosure Program"}}},"cveMetadata":{"assignerOrgId":"9974b330-7714-4307-a722-5648477acda7","assignerShortName":"rapid7","cveId":"CVE-2026-19584","datePublished":"2026-09-10T03:00:00.939Z","dateReserved":"2026-08-11T23:11:25.332Z","dateUpdated":"2026-09-11T03:56:10.955Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-10 03:17:00","lastModifiedDate":"2026-09-11 04:17:34","problem_types":["CWE-94","CWE-1336","CWE-1336 CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine","CWE-94 CWE-94: Improper Control of Generation of Code ('Code Injection')"],"metrics":{"cvssMetricV31":[{"source":"cve@rapid7.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N","baseScore":7.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.3,"impactScore":5.8}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-10T00:00:00+00:00","id":"CVE-2026-19584","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"19584","Ordinal":"1","Title":"Velociraptor VQL injection during notebook restore from backup","CVE":"CVE-2026-19584","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"19584","Ordinal":"1","NoteData":"Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOK_EDITOR permission to plant a VQL query which will be evaluated at elevated permissions if the notebook's backup is subsequently restored.","Type":"Description","Title":"Velociraptor VQL injection during notebook restore from backup"}]}}}