CVE-2026-64952 — Velociraptor Hunt Deletion With Insufficient Permission Check
The hunt_delete() VQL function allows deleting hunts. Velociraptor misapplied the permission check requiring only COLLECT_CLIENT (usually assigned to the "investigator" role) …
Published: 2026-08-12 · CVSS: 6.5 · CVSS 3.1
The hunt_delete() VQL function allows deleting hunts. Velociraptor misapplied the permission check requiring only COLLECT_CLIENT (usually assigned to the "investigator" role) instead of the "DELETE_RESULTS" permission (usually only assigned to "administrators").
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7