CVE-2026-64951 — Velociraptor DoS triggered by Divide by Zero panic
A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem …
Published: 2026-08-12 · CVSS: 3.5 · CVSS 3.1
A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile() function.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7