Netdata vulnerabilities

Products

• Netdata 12

Newest

• netdata Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution CVE-2026-83597 7.0 HighSeptember 22, 2026
• netdata Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent CVE-2026-83600 6.5 MediumSeptember 22, 2026
• netdata Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair CVE-2026-83598 7.8 HighSeptember 22, 2026
• netdata Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE CVE-2026-83603 Public exploit 8.4 HighSeptember 22, 2026
• netdata Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write CVE-2026-83601 6.5 MediumSeptember 22, 2026
• netdata Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK CVE-2026-83602 6.5 MediumSeptember 22, 2026
• netdata Netdata: WebSocket Decompression Bomb CVE-2026-83599 7.5 HighSeptember 22, 2026
• netdata Netdata < 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpoint CVE-2025-71385 5.1 MediumJuly 2, 2026
• netdata ndsudo: local privilege escalation via untrusted search path CVE-2024-32019 Public exploit 8.8 HighApril 12, 2024
• netdata Netdata is vulnerable to improper authentication CVE-2023-22497 Fix available 6.5 MediumJanuary 14, 2023
• netdata Netdata vulnerable to command injection CVE-2023-22496 Public exploitFix available EPSS 36.2% 8.1 HighJanuary 14, 2023
• netdata ** DISPUTED ** The Netdata web application through 1.13.0 allows remote attackers to inject their... CVE-2019-9834 Public exploitDisputed 6.1 MediumMarch 15, 2019