Netdata vulnerabilities
We track 7 vulnerabilities in Netdata products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on September 22, 2026.
Latest Netdata vulnerabilities
- 7.0 High severity
netdata: Improper Privilege Management
Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as elevated interactive processes in the initiating user's desktop session. A low-privileged local user who
- 8.4 High severity
netdata: External Control of File Name or Path
Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socket_path from the low-privileged netdata service account. The a
- 7.5 High severity
netdata: Improper Handling of Highly Compressed Data (Data Amplification)
Netdata is an open source observability tool. Prior to 2.11.0, Netdata's unauthenticated WebSocket server negotiates permessage-deflate before authentication, and src/web/websocket/websocket-compression.c allows websocket_client_decompress_message() to grow de
- 7.8 High severity
netdata: Improper Privilege Management
Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powershell.exe runs as SYSTEM without -NoProfile and loads %USERPROFILE%\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 from the l
- 8.8 High severity
netdata: Untrusted Search Path
Netdata is an open source observability tool. In affected versions the `ndsudo` tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The `ndsudo` tool is packaged as a `root`-owned executa
- 9.1 Critical severity
netdata: Exposure of Resource to Wrong Sphere
Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across re
- 9.8 Critical severity
netdata: Improper Neutralization of Special Elements used in a Command
Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the functio