CVE-2026-77798

Published: Sep 24, 2026Modified: Sep 24, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: cve@rapid7.com (Secondary)

Description

Velociraptor contains a deadlock condition that may be triggered by authenticated users. The issue stems from a lock management bug in the user management module.

Related CWEs

CWE-833

Deadlock

The product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.

References (2)

http://docs.velociraptor.app/announcements/advisories/cve-2026-7798/

Source: cve@rapid7.com

https://github.com/Velocidex/velociraptor/commit/b64d915422da2e8366781bea2b5c5e6808df829c

Source: cve@rapid7.com

Timeline

No history available yet.