-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| www.velocidex.com/golang/velociraptor | go | < 0.6.7-5 | 0.6.7-5 |
Miggo AIRoot Cause AnalysisThe vulnerability description explicitly identifies the copy() function in vql/filesystem/copy.go as the root cause. The documentation states that while read permissions are checked, write permissions for the destination path are not validated. This matches the CWE-862 (Missing Authorization) classification, as the function fails to enforce required write-access controls. The provided GitHub file paths and function name are repeated in multiple sources (CVE, GHSA, and Velociraptor's own advisory), confirming the target.
GoGoOngoing coverage of React2Shell