CVE-2026-83598
Publication date 22 September 2026
Last updated 24 September 2026
Ubuntu priority
Description
Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powershell.exe runs as SYSTEM without -NoProfile and loads %USERPROFILE%\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 from the low-privileged user who initiated repair. Commands placed in that profile before repair therefore execute with SYSTEM privileges. This vulnerability is fixed in 2.10.4.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| netdata | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
7.8 · High
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Other references
- https://www.cve.org/CVERecord?id=CVE-2026-83598
- https://github.com/netdata/netdata/commit/d762782697623a98b51b4e41f7fe2d12404f0662
- https://github.com/netdata/netdata/pull/22751
- https://github.com/netdata/netdata/releases/tag/v2.10.4
- https://github.com/netdata/netdata/security/advisories/GHSA-8hxv-2mg6-ggw5