Medium severity6.5NVD Advisory· Published Aug 12, 2026· Updated Oct 23, 2026
CVE-2026-64952
CVE-2026-64952
Description
The hunt_delete() VQL function allows deleting hunts.
Velociraptor misapplied the permission check requiring only COLLECT_CLIENT (usually assigned to the "investigator" role) instead of the "DELETE_RESULTS" permission (usually only assigned to "administrators").
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- osv-coordsRange: < 0.76.7.0.git145.b60ef1146-1.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.