CVE-2026-64951 — Velociraptor DoS triggered by Divide by Zero panic

CVE-2026-64951

Velociraptor DoS triggered by Divide by Zero panic PUBLISHED

Description (CNA)

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile() function.

Affected (CNA)

Vendor / product	Versions
Rapid7 / Velociraptor	affected 0 before 0.77.2

CWE

CWE-369

References

http://docs.velociraptor.app/announcements/advisories/cve-2026-64951/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.