Skip to content
OpenAdvisories

Vendor

netdata

11 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • High 8.4
    CVE-2026-83603 Public exploit

    Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE

    Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socket_path from the low-privileged netdata service account. The …

  • High 8.8
    CVE-2024-32019 Public exploit

    ndsudo: local privilege escalation via untrusted search path

    Netdata is an open source observability tool. In affected versions the `ndsudo` tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The `ndsudo` tool is packaged as a `root`-owned execut…

  • High 8.1
    CVE-2023-22496 Public exploit EPSS 36%

    Netdata vulnerable to command injection

    Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the functi…