[ CVE-2026-77797 · Published 24 Sep 2026 ]
Vulnerability in Rapid7 Velociraptor
CVSS 3.6
EPSS <1%1 agency advisoryNo fix listed yet
[ Description ]Official description
Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-3581
Rapid7 Velociraptor: Multiple vulnerabilities Translated from German