This vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor prior to version 0.76.6. The hostname field from client_info.json inside a collection ZIP is inserted into a YAML template using Go's text/template without proper escaping. An attacker can craft a collection ZIP with malicious hostname values containing double quotes and newlines to break out of the YAML quoted string and inject new mount remapping entries. When an analyst applies the generated remapping file with the --remap option, arbitrary Velociraptor Query Language (VQL) code executes with NullACLManager privileges, granting all permissions unsandboxed on the analyst's machine.

Successful exploitation allows an attacker to execute arbitrary VQL commands with full permissions on the analyst's machine, potentially leading to complete compromise of the system where the remapping file is applied. This includes confidentiality, integrity, and availability impacts as indicated by the CVSS score of 7.8 (high).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid applying remapping files from untrusted collection ZIPs or untrusted sources. Analysts should exercise caution when using the --remap option with files that could contain untrusted hostname data.