Rapid7 - Velociraptor - CRITICAL - CVE-2026-18972. An authenticated attacker can exploit a vulnerability in Velociraptor that allows them to spoof the identity of another GUI user. By sending requests with the custom header "Grpc-Metadata-USER", the attacker can perform actions masquerading as a different user. This exploitation risks granting unauthorized access, enabling low-privileged users to escalate their privileges and potentially take over administrator accounts.