What is GHSA-qx94-26r3-gv6g?

GHSA-qx94-26r3-gv6g is a security advisory published by GitHub Security Advisories with Medium severity. Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows...

Which CVE IDs does GHSA-qx94-26r3-gv6g cover?

GHSA-qx94-26r3-gv6g covers the following CVE IDs: CVE-2026-18348. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qx94-26r3-gv6g?

GHSA-qx94-26r3-gv6g has a CVSS v3 base score of 4.1, published by GitHub Security Advisories.

GHSA-qx94-26r3-gv6gMediumCVSS 4.1

Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows...

Vendor

GitHub Security Advisories

Published

August 11, 2026

Last Modified

August 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-18348 →

📋 Description

Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-18348
https://github.com/Velocidex/velociraptor/commit/48824fb51a2bdba832abc281e719ecbed74736df
http://docs.velociraptor.app/announcements/advisories/cve-2026-18348
https://github.com/advisories/GHSA-qx94-26r3-gv6g