Vulnerabilities in netdata
11 resultsCVE-2023-22496HIGHNetdata vulnerable to command injection EPSS 36.2%CVE-2024-32019HIGHndsudo: local privilege escalation via untrusted search pathEPSS 1.2%CVE-2026-83599HIGHNetdata: WebSocket Decompression BombEPSS 0.7%CVE-2023-22497MEDIUMNetdata is vulnerable to improper authenticationEPSS 0.7%CVE-2026-83600MEDIUMNetdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agentEPSS 0.5%CVE-2025-71385MEDIUMNetdata < 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg EndpointEPSS 0.4%CVE-2026-83601MEDIUMNetdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds writeEPSS 0.4%CVE-2026-83602MEDIUMNetdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECKEPSS 0.4%CVE-2026-83603HIGHNetdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCEEPSS 0.3%CVE-2026-83598HIGHNetdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI RepairEPSS 0.2%CVE-2026-83597HIGHNetdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair ExecutionEPSS 0.1%