Velociraptor VQL Verify Function Permission Bypass

The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an implementation fault in this VQL function, the global artifact repository is used which allows callers to overwrite existing artifacts without the required permissions. The attacker need only have the NOTEBOOK_EDIT permission (e.g. an analyst role) to be able to call this function.

Casky was already ahead

This CVE exploits attack patterns that Casky's 442matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

CVE-2026-19200 is a privilege escalation vulnerability in Velociraptor's verify() VQL function that allows low-privileged users to overwrite artifacts in the global repository without authorization. An attacker with basic NOTEBOOK_EDIT permissions—typically granted to analyst roles—can exploit a flawed implementation to modify existing artifacts, potentially injecting malicious code or altering forensic workflows. This matters because Velociraptor is widely used for incident response and threat hunting; compromised artifacts could lead to false negatives in investigations, contaminated evidence chains, or lateral movement within security operations. Organizations running Velociraptor are immediately affected if users with analyst-level access are not strictly controlled.

Casky's 442 matching skills detect the attack patterns underlying this CVE by mapping to MITRE ATT&CK techniques across Initial Access (TA0001), Resource Development (TA0043), Execution (TA0004), and Persistence (TA0006). Practitioners using Casky's extended reasoning would identify suspicious patterns including: unauthorized artifact modifications that bypass expected permission controls (TA0001—establishing trusted workflows), crafted VQL payloads designed to invoke verify() with escalated context (TA0043—developing capabilities), execution of malicious artifact code within Velociraptor's trusted environment (TA0004), and persistence mechanisms planted through artifact overwrites (TA0006). The platform would flag CWE-94 (code injection) and CWE-862 (missing authorization) violations through behavioral analysis, alerting security teams to notebook activities from analyst accounts that modify core artifacts outside normal change management procedures.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

442 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-19200.

Abuse of Public-Facing API: Mobile API Abuse

mobile security · low

Run

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

MITRE ATT&CK Techniques

TA0001 TA0043 TA0004 TA0006

Investigate the attack patterns behind CVE-2026-19200

Casky has 442 skills that investigate the attack patterns behind CVE-2026-19200. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn