Vulnerability in Rapid7 Velociraptor
CVE-2026-18860
Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment. Users can have different permissions in each org. To man…
CVSS v3 metric
CVSS v3 base score 8.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H.
Affected products
- Rapid7 Velociraptor — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-18860?
- CVE-2026-18860 is a high-severity vulnerability in Rapid7 Velociraptor, classified under Improper Handling of Insufficient Permissions or Privileges. CVSS score: 8.7/10. Published 2026-08-11.
- How severe is CVE-2026-18860?
- High severity. CVSS v3 base score is 8.7 out of 10.