The Velociraptor gRPC API provides a VFSGetBuffer endpoint that reads files from the datastore. The endpoint is supposed to enforce a deny list of path prefixes to prevent users from accessing sensitive files or files belonging to other organizations. The CVE demonstrates that this prefix check can be bypassed, enabling a user who has read permission in the ROOT organization to read files in other organizations where they normally lack permission. The result is unauthorized disclosure of data rather than code execution or denial of service.

Rapid7 Velociraptor gRPC API, specifically the VFSGetBuffer endpoint. Version information is not included in the advisory.

The CVSS score of 6.8 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, suggesting no widespread active exploitation yet. The attack vector is inferred to be a legitimate user with read access to the ROOT organization, who can construct requests to VFSGetBuffer that exploit the bypass. This allows elevated data access across organizational boundaries without special privileges beyond the existing read rights in the root org.