CVE-2026-6948 | BDVDB-2026-330177 Detail

Description#

Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server's agent control channel. This allows a compromised or rogue Velociraptor client to crash the server via out-of-memory (OOM) by sending crafted messages through the normal client communication channel.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-05-03Record published in the CVE List.
2. Version 22026-06-19Most recent update recorded in the CVE List.