CVE-2026-64951
Received Received - Intake

Divide by Zero in Velociraptor Client Sparse File Handling

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: Rapid7, Inc.

Description
A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile() function.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-12
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2026-64951
EUVD
EUVD-2026-57160

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
velociraptor velociraptor to 0.77.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-369 The product divides a value by zero.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-64951 is a divide-by-zero bug in Velociraptor's ShouldPadFile() function. A rogue client can upload a malformed sparse file that triggers a panic when the GUI attempts to expand it, crashing the server process.

Detection Guidance

Check Velociraptor server logs for crashes during file expansion attempts. Monitor for divide-by-zero errors in the ShouldPadFile() function logs. Verify client uploads of sparse files with unusual sizes.

Impact Analysis

An attacker with deployment credentials could upload a crafted file and crash the Velociraptor server if the victim enables the 'Expand Sparse Files' option. The server usually restarts automatically after the crash.

Mitigation Strategies

Upgrade Velociraptor to version 0.77.2 or later. Disable the 'Expand Sparse Files' GUI option until patched. Restrict client upload permissions to prevent malicious file uploads.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64951. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart