CVE-2025-6264: Velociraptor priviledge escalation via UpdateConfig artifact
- Is it exploited?
Reported, not confirmed by CISA. VulnCheck KEV lists it as exploited in the wild. CISA has not added it to its Known Exploited Vulnerabilities catalog as of .
VulnCheck KEV lists it since . It cites 8 public reports, the first from .
- How likely is exploitation in the next 30 days?
- 1%
EPSS score, percentile 63.7 of all scored records. A probability estimated by FIRST, not a report of exploitation.
- How severe?
- 5.5 Medium
CVSS v3.1 base score, given by the CNA
- What should I do?
CISA has set no required action, because the vulnerability is not in KEV.
The CVE record links no vendor advisory, patch or mitigation.
- Which versions are affected?
Affected
- before 0.74.3
Source: CISA KEV 2026.10.29, as of ; VulnCheck KEV, as of ; FIRST EPSS, as of ; CVE List, as of . About the data.
Description
Velociraptor priviledge escalation via UpdateConfig artifact
Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do anything and usually run with elevated permissions. To limit access to some dangerous artifact, Velociraptor allows for those to require high permissions like EXECVE to launch. The Admin.Client.UpdateClientConfig is an artifact used to update the client's configuration. This artifact did not enforce an additional required permission, allowing users with COLLECT_CLIENT permissions (normally given by the "Investigator" role) to collect it from endpoints and update the configuration. This can lead to arbitrary command execution and endpoint takeover. To successfully exploit this vulnerability the user must already have access to collect artifacts from the endpoint (i.e. have the COLLECT_CLIENT given typically by the "Investigator' role).
Source: CVE List, as of . About the data.
What to do
Advisories and patches
The CVE record links no vendor advisory, patch or mitigation.
Workaround (from the CVE record)
To better restrict the types of artifacts users can run, the `basic artifacts` mechanism should be used as described https://docs.velociraptor.app/docs/artifacts/security/#basic-artifacts To detect unintended privilege escalations in custom artifacts, users should run the artifact verifier as described here https://docs.velociraptor.app/docs/artifacts/security/#restricting-dangerous-client-artifacts
This summary is based on the CVE record as of . Check the vendor's advisory before you act: affected versions and fixes can change.
Affected products and versions
Versions by product, as listed in the CVE record (1 product)
| Status | Versions |
|---|---|
| Affected | before 0.74.3 |
Versions not listed are: unaffected.
Source: CVE List, as of . About the data.
Weakness
CWE-276, 1 CAPEC
- CWE-276: Incorrect Default Permissions
Attack patterns (CAPEC)
- CAPEC-23: File Content Injection
CWE and CAPEC are maintained by MITRE; the entries are those named in the CVE record.
Timeline
| Date | Event |
|---|---|
| CVE record published | |
| CVE record last updated |