Is CVE-2026-83597 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-83597?

CVE-2026-83597 has a CVSS v3 severity of HIGH (7).

Back

CVE-2026-83597

Description

Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as elevated interactive processes in the initiating user's desktop session. A low-privileged local user who triggers repair can interact with or hijack those visible process windows to execute arbitrary commands with SYSTEM privileges. This issue is fixed in stable version 2.10.4.