What is CVE-2026-18636?
CVE-2026-18636 is a vulnerability in the Velociraptor gRPC API's `VFSGetBuffer` endpoint. It allows users to bypass the prefix check against denied prefixes, potentially reading sensitive files from the datastore. Users should upgrade Velociraptor to the latest patched version to mitigate this issue.
Azərbaycanca: CVE-2026-18636 Velociraptor-un gRPC API-də `VFSGetBuffer` endpointində aşkarlanan zəiflikdir. Bu, qadağan edilmiş fayl prefikslərinin yoxlanışını keçərək istifadəçilərə həssas faylları oxumağa imkan verir. Bu problemi aradan qaldırmaq üçün Velociraptor-u ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-22
FAQ2
In which endpoint was CVE-2026-18636 discovered?
CVE-2026-18636 was discovered in the `VFSGetBuffer` endpoint of the Velociraptor gRPC API.
What should be done to mitigate this vulnerability?
Users should upgrade Velociraptor to the latest patched version to mitigate this issue.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.