CVE-2026-77798

Summary

Velociraptor contains a deadlock condition that may be triggered by authenticated users. The issue stems from a lock management bug in the user management module.

Affected Software

Weaknesses

• CWE-833: CWE-833 Deadlock

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• http://docs.velociraptor.app/announcements/advisories/cve-2026-7798/
• https://github.com/Velocidex/velociraptor/commit/b64d915422da2e8366781bea2b5c5e6808df829c

• ←Previous
• Next→