CVE-2026-8795

Katalog CVE

CVSS 7.8 · High EPSS 0,21%

Kerentanan Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'). Skor CVSS 3.1 7.8 (High) menurut rapid7.com.

Deskripsi (NVD)

A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in client_info.json inside a collection ZIP is inserted into a YAML template via Go's text/template without escaping. An attacker providing a crafted collection ZIP can leverage literal double quotes and newlines in the hostname to break out of the YAML quoted string and inject a new mount remapping entry. When an analyst applies the generated remapping file with --remap, arbitrary VQL executes on their machine with NullACLManager (all permissions granted, unsandboxed).

Rincian

Terbit di NVD

9 Juni 2026

Terakhir diubah

23 Juli 2026

Status NVD

Awaiting Analysis

CVSS 3.1

7.8 (High), sumber rapid7.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-94: Improper Control of Generation of Code ('Code Injection')
CWE-116: Improper Encoding or Escaping of Output

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,2% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://docs.velociraptor.app/announcements/advisories/cve-2026-8795/