CVE-2024-32019: netdata Untrusted Search Path
Vulnerability summary
CVE-2024-32019 is a high (CVSS 8.8) Untrusted Search Path vulnerability in netdata. EPSS estimates a 1.17% chance of exploitation in the next 30 days, higher than 66.9% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 12-04-2024PublishedVulnerability first disclosed.
- 06-09-2024Last modifiedVulnerability information updated.
Description
Netdata is an open source observability tool. In affected versions the `ndsudo` tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The `ndsudo` tool is packaged as a `root`-owned executable with the SUID bit set. It only runs a restricted set of external commands, but its search paths are supplied by the `PATH` environment variable. This allows an attacker to control where `ndsudo` looks for these commands, which may be a path the attacker has write access to. This may lead to local privilege escalation. This vulnerability has been addressed in versions 1.45.3 and 1.45.2-169. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST8.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
1.17%
Chance of exploitation in the next 30 days
Percentile
67%
Versus all other CVEs
30-day change
0.00 pp
From 1.17% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundNetdata ndsudo privilege escalation
exploit/linux/local/ndsudo_cve_2024_32019
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Netdata1 product
- netdata≥ 1.45.0, < 1.45.3 | ≥ 1.44.0-60, < 1.45.0-169
1 vendor · 1 product
References
2 links- github.com/netdata/netdata/security/advisories/GHSA-pmhq-4cxq-wj93X Refsource CONFIRM
- github.com/netdata/netdata/pull/17377X Refsource MISC