Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2026-64951

Velociraptor DoS triggered by Divide by Zero panic

Description

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile() function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rapid7 Velociraptor

Default version status: unaffected

  • 0 to < 0.77.2affected

References