Threats tagged 'ghsa-9qq5-422f-33c2'

Velociraptor versions up to 0.77.1 contain a vulnerability in the sql() VQL plugin that allows low-privilege analyst users to read arbitrary server files. The plugin executes SQL queries without enforcing required permissions, enabling attackers to exploit MySQL's LOAD DATA LOCAL INFILE feature to exfiltrate sensitive files such as private keys and password hashes.