Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powershell.exe runs as SYSTEM without -NoProfile and loads %USERPROFILE%DocumentsWindowsPowerShellMicrosoft.PowerShell_profile.ps1 from the low-privileged user who initiated repair. Commands placed in that profile before repair therefore execute with SYSTEM privileges. This vulnerability is fixed in 2.10.4.
2026年9月23日
CVE-2026-83598 [HIGH] – Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata
📑 文章目录



