---
id: CVE-2026-83597
title: Netdata is an open source observability tool
summary: >-
  Netdata is an open source observability tool. From version 2.0.0 until 2.10.4,
  Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as
  elevated interactive processes in the initiating user's desktop session. A
  low-pr…
severity: high
cvss: 7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-269
vendor: netdata
product: netdata
affected:
  - 'netdata >= 2.0.0, < 2.10.4'
published: '2026-09-22'
updated: '2026-09-23'
sourceUpdated: '2026-09-23T18:28:25.093'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-83597'
references:
  - url: >-
      https://github.com/netdata/netdata/commit/d762782697623a98b51b4e41f7fe2d12404f0662
    label: security-advisories@github.com
  - url: 'https://github.com/netdata/netdata/pull/22751'
    label: security-advisories@github.com
  - url: 'https://github.com/netdata/netdata/releases/tag/v2.10.4'
    label: security-advisories@github.com
  - url: 'https://github.com/netdata/netdata/security/advisories/GHSA-jmv4-pq25-crvv'
    label: security-advisories@github.com
  - url: 'https://github.com/netdata/netdata/security/advisories/GHSA-jmv4-pq25-crvv'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
epss: 0.00139
epssPercentile: 0.02653
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-22T17:49:30.769424Z'
ingestedAt: '2026-09-22T18:08:12.474Z'
---

## Overview

Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as elevated interactive processes in the initiating user's desktop session. A low-privileged local user who triggers repair can interact with or hijack those visible process windows to execute arbitrary commands with SYSTEM privileges. This issue is fixed in stable version 2.10.4.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.