CVE-2026-83597

7.0 Élevée

Publiée le 22/09/2026 à 20:17 · Modifiée le 23/09/2026 à 20:28 · En attente d'analyse NVD · Source : security-advisories@github.com

Description

Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as elevated interactive processes in the initiating user's desktop session. A low-privileged local user who triggers repair can interact with or hijack those visible process windows to execute arbitrary commands with SYSTEM privileges. This issue is fixed in stable version 2.10.4.

Traduire en français

Produits concernés

netdata

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.0 Élevée	security-advisories@github.com	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-269

Références

https://github.com/netdata/netdata/commit/d762782697623a98b51b4e41f7fe2d12404f0662
https://github.com/netdata/netdata/pull/22751
https://github.com/netdata/netdata/releases/tag/v2.10.4
https://github.com/netdata/netdata/security/advisories/GHSA-jmv4-pq25-crvv
https://github.com/netdata/netdata/security/advisories/GHSA-jmv4-pq25-crvv

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories