{"id":"CVE-2026-18636","title":"The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore","summary":"The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied pre…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-288"],"published":"2026-08-11","updated":"2026-08-28","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-18636","references":[{"url":"http://docs.velociraptor.app/announcements/advisories/cve-2026-18636/","label":"cve@rapid7.com"}],"tags":["nvd"],"epss":0.00236,"epssPercentile":0.14837,"ingestedAt":"2026-08-29T19:41:14.155Z","slug":"CVE-2026-18636","body":"## Overview\n\nThe Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to access usually denied files. If the user has read permission in the ROOT org, this allows access to other orgs, in which the user may not have permission.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}