Vulnerability details

CVE-2026-83597

netdata netdata

Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution

CVSS 3.1

7.0High

Official description

Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as elevated interactive processes in the initiating user's desktop session. A low-privileged local user who triggers repair can interact with or hijack those visible process windows to execute arbitrary commands with SYSTEM privileges. This issue is fixed in stable version 2.10.4.

CVSS scores

Score	Version	Source	Vector
7.0High	3.1	CVEProject cvelistV5 (CNA) (GitHub_M)	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
netdata	netdata	>= 2.0.0, < 2.10.4	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/netdata/netdata/pull/22751 x_refsource_MISC
https://github.com/netdata/netdata/commit/d762782697623a98b51b4e41f7fe2d12404f0662 x_refsource_MISC
https://github.com/netdata/netdata/releases/tag/v2.10.4 x_refsource_MISC
https://github.com/netdata/netdata/security/advisories/GHSA-jmv4-pq25-crvv x_refsource_CONFIRM

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-09-22
Last updated: 2026-09-22
State: Published
Assigner (CNA): GitHub_M

Exploit prediction (EPSS)

0.13%

Probability of exploitation in 30 days

3.2%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-269
Improper Privilege Management