Velociraptor, the open-source digital forensics and incident response tool, normally gates dangerous artifacts like arbitrary command execution behind extra permission checks. CVE-2026-19583 shows that check was missing for client monitoring artifacts, so a user only authorized to schedule monitoring tasks could sneak in artifacts that should have required a higher permission level. In effect, a narrowly-scoped account could escalate to run commands it was never meant to trigger.
// source: nvd.nist.gov ↗