Velociraptor’s VQL parser contains a flaw in the SQLPlugin.Call routine that does not enforce FILESYSTEM_READ or NETWORK permissions before building a database connection string for MySQL or PostgreSQL. An analyst possessing ANY_QUERY privilege can supply a MySQL connection string that enables local‑infile access, causing the service to connect to a malicious MySQL instance that requests files readable by the Velociraptor process, including files readable by root if the service runs with elevated privileges. Additionally, a low‑privilege analyst can exploit the SQLite data accessor by using the ATTACH DATABASE statement to create a database file, bypassing the plugin‑level check and exposing the local filesystem for read operations. The result is that an attacker can read any file that the Velociraptor process can access, leading to unauthorized disclosure of sensitive system data.

All deployments of Velocidex Velociraptor running a version earlier than 0.77.2 are vulnerable. The issue was fixed in release v0.77.2, which reinstated the necessary FILESYSTEM_READ and NETWORK permission checks around database access.

The CVSS score of 6.5 indicates a moderate severity risk. EPSS data is not available, and the vulnerability is not listed in CISA KEV, suggesting no currently active, widespread exploitation. An attacker only needs the ability to submit arbitrary VQL queries; therefore environments where analysts have broad VQL privileges or where the Velociraptor process runs with root or highly privileged accounts pose a higher risk. Failure to mitigate this flaw could result in the disclosure of confidential or system‑level files on the host.