PT-2026-96843 · Netdata · Netdata Windows Agent

CVE-2026-83597

·

Published

2026-09-22

·

Updated

2026-09-22

CVSS v3.1

7.0

High

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Netdata Windows Agent versions 2.0.0 through 2.10.3
Description The MSI repair process launches powershell.exe and wevtutil.exe as elevated interactive processes within the user's desktop session. A low-privileged local user can trigger this repair and interact with or hijack these visible process windows to execute arbitrary commands with SYSTEM privileges.
Recommendations Update to version 2.10.4.

Exploit

Fix

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-83597
GHSA-JMV4-PQ25-CRVV

Affected Products

Netdata Windows Agent