The NewNotebook API in Rapid7 Velociraptor accepts parameters without proper sanitization, allowing an authenticated user who holds NOTEBOOK_EDIT permission to write a file with a ".json.db" extension outside the organization’s data store directory. This enables the overwriting of critical metadata files, such as ACL records and hunt definitions, which can corrupt data and compromise integrity. The vulnerability therefore enables destructive activity that does not directly expose code execution or network compromise but can destroy and corrupt the platform’s persistent data. The impact is limited to data isolation where the notebook host runs, but any client with sufficient rights can trigger the corruption.

Rapid7 Velociraptor is the sole vendor listed. The CVE data does not detail a specific product version or release; any installation that exposes the NewNotebook REST endpoint is potentially vulnerable. Users should verify their Velociraptor deployment against the vendor advisory for fixed versions.

The CVSS score of 7.1 highlights a high severity assessment focused on integrity impact, while the EPSS score is not available, so the exact likelihood of exploitation in the wild cannot be quantified. The vulnerability is listed as not in CISA KEV, indicating no known active exploitation reports. The attack vector is inferred to be an authenticated application‑level request, meaning the user must already have access to the Velociraptor UI or API with NOTEBOOK_EDIT rights. Because the flaw relies on permission elevation and directory traversal, the risk is significant for environments where privileged notebook editing is widely granted. The exploit does not require network-level access beyond legitimate API usage, so monitoring and mitigating user privileges is a key defensive measure.