CVE-2026-19584

Velociraptor's daily backup feature, which is enabled by default, includes notebook backups, and when such a backup is restored the notebook cell content is interpolated into a template with no ACL checks (code/template injection, CWE-94/CWE-1336). A user holding NOTEBOOK_EDITOR permission can plant a malicious VQL query in a notebook cell, and that query is then evaluated with elevated permissions whenever the notebook's backup is subsequently restored, letting the user run actions beyond their intended access (privilege escalation, reflected in the scope-changed CVSS of 7.7). The attack requires a low-privileged authenticated user, a crafted notebook, and a later backup-restore event, which the CVSS captures as high attack complexity and required user interaction. Deployments are affected where the default backup configuration is in use and non-administrators have been granted NOTEBOOK_EDITOR rights; the provided data does not list affected or fixed version numbers. No public proof-of-concept is known, the issue is not in CISA KEV, and there are no reports of in-the-wild exploitation.

What to do: Follow the Rapid7/Velociraptor advisory and upgrade as soon as a patched release is published, since no fixed version number is identified in the available data. Until then, restrict NOTEBOOK_EDITOR permission to trusted users, review existing notebooks for unexpected or unexplained VQL cells, and inspect audit logs for notebook backup-restore events that could have triggered the planted queries.