CVE-2026-64951: Velociraptor DoS triggered by Divide by Zero panic
A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process.
The problem is a Divide by Zero bug in the ShouldPadFile() function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64951?
The severity of CVE-2026-64951 is classified as low with a score of 3.5.
How do I fix CVE-2026-64951?
To fix CVE-2026-64951, ensure that you apply the latest patches from the Velociraptor software updates.
What kind of vulnerability is CVE-2026-64951?
CVE-2026-64951 is a Divide by Zero vulnerability that can lead to a denial of service.
What causes the CVE-2026-64951 vulnerability?
The CVE-2026-64951 vulnerability is caused by a rogue Velociraptor client uploading a malformed sparse file which triggers a Divide by Zero error in the ShouldPadFile() function.
What impact does CVE-2026-64951 have on the system?
The impact of CVE-2026-64951 is that it may crash the server process when the GUI attempts to expand a malformed sparse file.