{"metadata": {"vulnerability": "CVE-2026-85737", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2026-08-25T05:07:01Z", "date_only": false, "value": "2026-08-25T05:07:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/Velocidex/velociraptor/security/advisories/GHSA-9qq5-422f-33c2", "record": "CVE-2026-85737", "field": "creation_timestamp", "uuid": "de3971b1-0a3c-4b79-98b4-760f9c4494a1", "url": "https://github.com/Velocidex/velociraptor/security/advisories/GHSA-9qq5-422f-33c2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-04T14:50:16.719Z", "date_only": false, "value": "2026-09-04T14:50:16.719Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85737", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-06T20:23:33.445Z", "date_only": false, "value": "2026-11-06T20:23:33.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85737", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-06T20:23:33.445Z", "date_only": false, "value": "2026-11-06T20:23:33.445Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-85737", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-06T20:27:57.368Z", "date_only": false, "value": "2026-11-06T20:27:57.368901Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117571379314680553", "record": "CVE-2026-85737", "field": "creation_timestamp", "uuid": "b6a32627-172c-40fc-8a9e-33d5b173ecdc", "content": "CVE-2026-85737 Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin Velociraptor is a tool for collecting host-based state information using Velociraptor Query Language (VQL) queries. Prior to 0.77.2, SQLPlugin.Call in vql/parsers/sql/sql.go does not enforce plugin-level FILESYSTEM_READ or NETWORK checks before the mysql and postgres branches pass a caller-controlled connstring to sql.Open, allowing arbitrary outbound database connections. With attacker-controlled MySQL connection options that enable local-infile access, a rogue MySQL server can request files readable by the Velociraptor server process, including root-readable files when that process runs as root. The SQLite file accessor still enforces FILESYSTEM_READ, but a low-privilege analyst with ANY_QUERY can use the zero-permission data accessor and ATTACH DATABASE to create files without the plugin-level check. This issue is fixed in version 0.77.2.\nhttps://www.cve.org/CVERecord?id=CVE-2026-85737https://github.com/Velocidex/velociraptor/security/advisories/GHSA-9qq5-422f-33c2https://github.com/Velocidex/velociraptor/pull/4952https://github.com/Velocidex/velociraptor/commit/d7de958e846d3742a7a3a8538fd463e4f12fc528https://github.com/Velocidex/velociraptor/commit/f25390f8fbd00c888f0b7aaba2c061a51c3f7082https://github.com/Velocidex/velociraptor/releases/tag/v0.77.2#Velocidex #velociraptor#CVE_2026_85737#bot", "url": "https://infosec.exchange/users/cve/statuses/117571379314680553"}, {"timestamp": "2026-11-06T21:17:11Z", "date_only": false, "value": "2026-11-06T21:17:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9QQ5-422F-33C2", "record": "GHSA-9QQ5-422F-33C2", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-06T21:17:11.940Z", "date_only": false, "value": "2026-11-06T21:17:11.940", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85737", "record": "FKIE_CVE-2026-85737", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T22:25:14Z", "date_only": false, "value": "2026-11-09T22:25:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9QQ5-422F-33C2", "record": "GHSA-9QQ5-422F-33C2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T22:25:14Z", "date_only": false, "value": "2026-11-09T22:25:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9QQ5-422F-33C2", "record": "GHSA-9QQ5-422F-33C2", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-10T08:30:50Z", "date_only": false, "value": "2026-11-10T08:30:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/498b8db70191454d0ed968891384e2f8", "record": "CVE-2026-85737", "field": "creation_timestamp", "uuid": "34ea6738-a294-4149-a361-81d2ec09d26f", "content": "# CVE-2026-85737: CVE-2026-85737: Missing Authorization and Arbitrary File Disclosure in Velocidex Velociraptor sql() VQL Plugin\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-11-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-85737\n\n## Summary\nAn authorization bypass vulnerability in Velocidex Velociraptor versions prior to 0.77.2 allows authenticated users with low-privilege query permissions to bypass access controls in the sql() VQL plugin. By supplying crafted MySQL connection strings pointing to an attacker-controlled rogue MySQL server with local-infile enabled, an attacker can read arbitrary files from the Velociraptor server host filesystem with the privileges of the server process.\n\n## TL;DR\nVelociraptor prior to 0.77.2 fails to enforce FILESYSTEM_READ and NETWORK ACL checks in the sql() VQL plugin. Authenticated users holding ANY_QUERY permissions can initiate outbound connections to a rogue MySQL server and exploit the MySQL LOCAL INFILE protocol feature to exfiltrate arbitrary files from the Velociraptor server.\n\n## Technical Details\n\n- **Vulnerability Type**: CWE-862: Missing Authorization\n- **Affected Component**: vql/parsers/sql/sql.go (SQLPlugin.Call)\n- **Attack Vector**: Network (Authenticated VQL Query with ANY_QUERY)\n- **CVSS v3.1 Score**: 6.5 Medium (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n- **EPSS Score**: 0.24% (14.97th Percentile)\n- **Primary Impact**: Arbitrary Server File Read via MySQL LOCAL INFILE\n- **Exploit Status**: No known public exploits or active exploitation\n- **Patched Version**: Velociraptor 0.77.2\n\n## Affected Systems\n\n- Velocidex Velociraptor\n- **Velociraptor**: < 0.77.2 (Fixed in: `0.77.2`)\n\n## Mitigation\n\n- Upgrade Velociraptor server installations to version 0.77.2 or later to enforce runtime ACL checks in the sql() VQL plugin.\n- Disable the sql() VQL plugin globally via the security.denied_plugins directive in server.config.yaml if immediate patching is not possible.\n- Implement strict outbound network egress filtering on the Velociraptor server host to block unauthorized outbound TCP connections (e.g., TCP ports 3306 and 5432).\n- Run the Velociraptor server service under a dedicated low-privilege operating system account rather than root or SYSTEM.\n\n**Remediation Steps:**\n1. Download the official Velociraptor v0.77.2 release binary from https://github.com/Velocidex/velociraptor/releases/tag/v0.77.2.\n2. Replace the existing Velociraptor server binary on the host system and restart the Velociraptor server service.\n3. If applying the workaround instead of upgrading, edit server.config.yaml to include 'sql' under security.denied_plugins and restart the Velociraptor service.\n4. Audit historical VQL query logs for prior executions of the sql() plugin utilizing the 'mysql' or 'postgres' drivers or containing the 'allowAllFiles' parameter.\n\n## References\n\n- [GitHub Security Advisory GHSA-9qq5-422f-33c2](https://github.com/Velocidex/velociraptor/security/advisories/GHSA-9qq5-422f-33c2)\n- [NVD Vulnerability Detail: CVE-2026-85737](https://nvd.nist.gov/vuln/detail/CVE-2026-85737)\n- [CVE.org Record: CVE-2026-85737](https://www.cve.org/CVERecord?id=CVE-2026-85737)\n- [Velociraptor Pull Request #4952 (Sync 0.77.2)](https://github.com/Velocidex/velociraptor/pull/4952)\n- [Fix Commit d7de958e846d3742a7a3a8538fd463e4f12fc528](https://github.com/Velocidex/velociraptor/commit/d7de958e846d3742a7a3a8538fd463e4f12fc528)\n- [Fix Commit f25390f8fbd00c888f0b7aaba2c061a51c3f7082](https://github.com/Velocidex/velociraptor/commit/f25390f8fbd00c888f0b7aaba2c061a51c3f7082)\n- [Velociraptor Release v0.77.2](https://github.com/Velocidex/velociraptor/releases/tag/v0.77.2)\n- [CVEListV5 JSON Record for CVE-2026-85737](https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85737.json)\n- [CISA Known Exploited Vulnerabilities Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-85737) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/498b8db70191454d0ed968891384e2f8"}, {"timestamp": "2026-11-10T20:09:28.559Z", "date_only": false, "value": "2026-11-10T20:09:28.559638Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85737", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-10T20:09:28.559Z", "date_only": false, "value": "2026-11-10T20:09:28.559638Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85737", "record": "FKIE_CVE-2026-85737", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-10T20:09:49.636Z", "date_only": false, "value": "2026-11-10T20:09:49.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85737", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-10T20:09:49.636Z", "date_only": false, "value": "2026-11-10T20:09:49.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85737", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-12T22:18:51.470Z", "date_only": false, "value": "2026-11-12T22:18:51.470", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85737", "record": "FKIE_CVE-2026-85737", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-15T03:10:22.168Z", "anchors": {"origin": {"timestamp": "2026-11-06T20:23:33.445Z", "date_only": false, "value": "2026-11-06T20:23:33.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85737", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-06T20:23:33.445Z", "date_only": false, "value": "2026-11-06T20:23:33.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85737", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-25T05:07:01Z", "date_only": false, "value": "2026-08-25T05:07:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/Velocidex/velociraptor/security/advisories/GHSA-9qq5-422f-33c2", "record": "CVE-2026-85737", "field": "creation_timestamp", "uuid": "de3971b1-0a3c-4b79-98b4-760f9c4494a1", "url": "https://github.com/Velocidex/velociraptor/security/advisories/GHSA-9qq5-422f-33c2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -6362192.445, "hours": -1767.2756791666668, "days": -73.63648663194445, "min_seconds": -6362192.445, "max_seconds": -6362192.445, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-11-06T20:23:33.445Z", "date_only": false, "value": "2026-11-06T20:23:33.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85737", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-25T05:07:01Z", "date_only": false, "value": "2026-08-25T05:07:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/Velocidex/velociraptor/security/advisories/GHSA-9qq5-422f-33c2", "record": "CVE-2026-85737", "field": "creation_timestamp", "uuid": "de3971b1-0a3c-4b79-98b4-760f9c4494a1", "url": "https://github.com/Velocidex/velociraptor/security/advisories/GHSA-9qq5-422f-33c2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 715608.723298, "hours": 198.7802009161111, "days": 8.28250837150463, "min_seconds": 715608.723298, "max_seconds": 715608.723298, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-06T20:23:33.445Z", "date_only": false, "value": "2026-11-06T20:23:33.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85737", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T03:10:22.168Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 7077801.168298, "hours": 1966.0558800827775, "days": 81.91899500344907, "min_seconds": 7077801.168298, "max_seconds": 7077801.168298, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-25T05:07:01Z", "date_only": false, "value": "2026-08-25T05:07:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/Velocidex/velociraptor/security/advisories/GHSA-9qq5-422f-33c2", "record": "CVE-2026-85737", "field": "creation_timestamp", "uuid": "de3971b1-0a3c-4b79-98b4-760f9c4494a1", "url": "https://github.com/Velocidex/velociraptor/security/advisories/GHSA-9qq5-422f-33c2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T03:10:22.168Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}