A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile() function.CreditsTristan Madani (Talence Security)Referenceshttp://docs.velociraptor.app/announcements/advisories/cve-2026-64951/
