{"id":"CVE-2026-78411","revision":"18a536cc068047979f526daa7e1f543b","records":[{"revision":"18a536cc068047979f526daa7e1f543b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-78411","aliases":[],"title":"Velociraptor Server Metadata update with Insufficient Permission Check","description":"Velociraptor's SetClientMetadata used the wrong permission check to enforce setting metadata on the server. This allows a user with LABEL_CLIENTS permission to update the server metadata.\n\nServer metadata is often used to store site wide configuration data that should only be updated by the server admin.","state":0,"publishedAt":"2026-10-05T17:19:26.34+00:00","modifiedAt":"2026-10-05T19:05:02.257+00:00","affected":[{"ecosystem":"Vendor product","name":"Velociraptor","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Rapid7\",\n                    \"product\": \"Velociraptor\",\n                    \"platforms\": [\n                        \"Linux\"\n                    ],\n                    \"packageName\": \"Velociraptor\",\n                    \"repo\": \"https://github.com/Velocidex/velociraptor/\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"0.77.3\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","score":6.5,"severity":"MEDIUM"}],"references":["http://docs.velociraptor.app/announcements/advisories/cve-2026-78411"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-78411","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-78411","identifiers":["CVE-2026-78411"]},"retained":false,"historicalAffected":[]}],"coverage":[]}