A vulnerability described as problematic has been identified in Rapid7 Velociraptor up to 0.77.1. This affects an unknown part of the component upload_azure/upload_sftp/upload_smb. Executing a manipulation can lead to improper authorization.
The identification of this vulnerability is CVE-2026-18348. The attack may be launched remotely. There is no exploit available.
Upgrading the affected component is recommended.
