Medium severity4.9NVD Advisory· Published Oct 5, 2026

CVE-2026-78412

Description

Velociraptor's WatchEvent gRPC API can specify the OrgId of the org from which events should be streamed. The server checks the API permissions against the caller's Org instead of the requested Org. This allows a user with API access in one org to read events from another org for which they have no access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Velocidex/Velociraptorllm-create

Patches

Vulnerability mechanics

References

docs.velociraptor.app/announcements/advisories/cve-2026-78412nvd

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000