CVE-2026-7573 — GetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizations
An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve th…
Published: 2026-05-06 · CVSS: 5.0 · CVSS 3.1
An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the complete ACL policy (roles and permissions) for any user across all organizations by supplying targeted Name and Org parameters via a network request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7