一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月23日

CVE-2026-83598 [HIGH] – Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata

未分类
📑 文章目录

Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powershell.exe runs as SYSTEM without -NoProfile and loads %USERPROFILE%DocumentsWindowsPowerShellMicrosoft.PowerShell_profile.ps1 from the low-privileged user who initiated repair. Commands placed in that profile before repair therefore execute with SYSTEM privileges. This vulnerability is fixed in 2.10.4.