The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an implementation fault in this VQL function, the global artifact repository is used which allows callers to overwrite existing artifacts without the required permissions.  The attacker need only have the NOTEBOOK_EDIT permission (e.g. an analyst role) to be able to call this function.

CVE-2026-19200 describes a privilege escalation vulnerability in Velociraptor's VQL verify() function. The function is intended to allow users to check artifacts for syntactic and other issues, but due to an implementation flaw, it uses the global artifact repository instead of a scoped one. This allows any user with the NOTEBOOK_EDIT permission (such as an analyst role) to overwrite existing artifacts without the required elevated permissions. The vulnerability bypasses access controls meant to restrict artifact modification. An attacker exploiting this flaw could alter artifacts in the global repository, potentially affecting forensic investigations or security monitoring workflows. A fix has been proposed via a GitHub pull request to the Velociraptor project. The issue is documented in Velociraptor's official security advisories. Organizations using Velociraptor should review analyst-level permissions and apply available patches promptly.