CVE-2026-64951Velociraptor DoS triggered by Divide by Zero panic

Description

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile() function.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• http://docs.velociraptor.app/announcements/advisories/cve-2026-64951/