CVE-2026-19584: Velociraptor VQL injection during notebook restore from backup
Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOKEDITOR permission to plant a VQL query which will be evaluated at elevated permissions if the notebook's backup is subsequently restored.
Affected Software
Event History
Frequently Asked Questions
Who can plant the malicious content, and when does it execute?
A user with NOTEBOOK_EDITOR permission can place a malicious VQL query in notebook cell content. The query is evaluated at elevated permissions only if a backup containing that notebook is later restored.
Are default deployments affected?
The described attack path involves Velociraptor's daily notebook backup feature, which is enabled by default. Exposure requires a notebook backup to be restored after the malicious content has been included in it.
What permissions are needed for exploitation?
The attacker needs NOTEBOOK_EDITOR permission to create or modify notebook cell content. The CVSS vector also indicates that user interaction is required, consistent with a backup restore being needed to trigger evaluation.