A vulnerability classified as very critical was found in Rapid7 Velociraptor up to 0.77.1. Impacted is an unknown function of the component CSV file Handler. Such manipulation leads to csv injection.
This vulnerability is documented as CVE-2026-64955. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
