Threats affecting pkg:github/velocidex/velociraptor

Velociraptor versions prior to 0.77.2 contain a missing authorization vulnerability in the SQLPlugin.Call function. This flaw allows attacker-controlled connection strings to be passed to SQL database connections without enforcing required FILESYSTEM_READ or NETWORK permissions. Exploitation can lead to unauthorized outbound database connections and potential file access, including root-readable files if Velociraptor runs as root. The issue is fixed in version 0.77.2.