CVE-2026-18636

The CVSS 6.8 rating for this Velociraptor bypass obscures a more fundamental problem: prefix-based path filtering was never appropriate as an isolation mechanism for multi-tenant VFS access, and this CVE proves why. The bypass allows a user with ROOT organization read permissions to access files in other organizations where they may have no legitimate access — a tenant isolation failure that exposes sensitive forensic data, incident response artifacts, and threat intelligence collected across your deployment. The prerequisite ROOT org access reduces but does not eliminate severity; many deployments treat ROOT org as a baseline administrative tier, making this a meaningful privilege escalation path in practice. The deeper concern is what the patch actually does. If Velociraptor simply adds more denied prefixes to the blocklist, you should treat this as a recurring vulnerability — each patch becomes a race against the next bypass variant. The correct fix moves VFS access control to capability-based gating that occurs before any path evaluation, making the prefix list irrelevant rather than essential. Your priority: determine whether your deployment runs in multi-tenant mode where cross-org isolation matters, audit which users hold ROOT org permissions, and verify whether the applied patch rearchitects the access model or just hardens the deny list. If it's the latter, treat this as a known architectural weakness requiring ongoing monitoring rather than a one-time fix.

Reviewed through automated stages and approved by a human before publication.