Rapid7 Velociraptor's default daily backup feature creates notebook backups. When restoring these backups, the notebook cell content is interpolated into a template engine without performing access control checks. This improper neutralization of special elements (CWE-1336) enables a malicious user with NOTEBOOK_EDITOR permission to embed a VQL query that will be executed with elevated permissions during the restore process. The vulnerability has a CVSS 3.1 score of 7.7, indicating high severity, with network attack vector, high confidentiality and integrity impact, and requires low privileges with user interaction.

An attacker with NOTEBOOK_EDITOR permission can plant malicious VQL queries in notebook backups that execute with elevated privileges when the backup is restored. This can lead to unauthorized access and modification of sensitive data within Velociraptor, compromising confidentiality and integrity. There is no indication of availability impact or known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict NOTEBOOK_EDITOR permissions to trusted users only and avoid restoring backups from untrusted sources.