CVE-2026-83598CWE-269CWE-427privilege-escalation

CVE-2026-83598

High · published September 22, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powershell.exe runs as SYSTEM without -NoProfile and loads %USERPROFILE%\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 from the low-privileged user who initiated repair. Commands placed in that profile before repair therefore execute with SYSTEM privileges. This vulnerability is fixed in 2.10.4.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Weaknesses
CWE-269 · Improper Privilege Management; CWE-427 · Uncontrolled Search Path Element
Published
2026-09-22T21:17Z
References (5)
https://github.com/netdata/netdata/commit/d762782697623a98b51b4e41f7fe2d12404f0662 · [email protected]https://github.com/netdata/netdata/pull/22751 · [email protected]https://github.com/netdata/netdata/releases/tag/v2.10.4 · [email protected]https://github.com/netdata/netdata/security/advisories/GHSA-8hxv-2mg6-ggw5 · [email protected]https://github.com/netdata/netdata/security/advisories/GHSA-8hxv-2mg6-ggw5 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 24 SEP 03:25Z
    EPSS moved — → 0%
    epss
  • 22 SEP 17:04Z
    Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair
    cvelistv5