Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2026-7573

GetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizations

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the complete ACL policy (roles and permissions) for any user across all organizations by supplying targeted Name and Org parameters via a network request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Velocidex velociraptor

Default version status: unaffected

  • 0 to < 0.76.5affected

References