An implementation flaw in Velociraptor’s verify() VQL function causes it to reference the global artifact repository rather than the intended local context, enabling a user with only NOTEBOOK_EDIT permission to overwrite existing built‑in artifacts. This flaw permits an analyst‑level user to replace or modify critical artifacts without proper authorization, potentially leading to unauthorized code execution or data manipulation. This vulnerability is classified as a privilege escalation bug with missing authorization controls (CWE‑862) and an improper control of code generation (CWE‑94).

The affected system is Rapid7 Velociraptor. Versions that include the verify() function are impacted if they lack the patch that enforces proper repository scope; the vulnerability applies to all releases prior to the fix referenced in the advisory.

The CVSS score is 8.9, indicating high severity. EPSS data is not available and the issue is not listed in the CISA KEV catalog. The attack requires only the NOTEBOOK_EDIT permission, which typically belongs to analyst roles, so any analyst account can exploit it. Once an artifact is overwritten, the attacker could alter behavior or embed malicious code, thereby gaining further control over analysis workflows. The lack of a higher‑level authorization check makes the attack straightforward for authenticated users within the system.