CVE-2024-32019

Netdata is an open source observability tool. In affected versions the `ndsudo` tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The `ndsudo` tool is packaged as a `root`-owned executable with the SUID bit set. It only runs a restricted set of external commands, but its search paths are supplied by the `PATH` environment variable. This allows an attacker to control where `ndsudo` looks for these commands, which may be a path the attacker has write access to. This may lead to local privilege escalation. This vulnerability has been addressed in versions 1.45.3 and 1.45.2-169. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-426

• https://github.com/netdata/netdata/pull/17377
• https://github.com/netdata/netdata/security/advisories/GHSA-pmhq-4cxq-wj93
• https://github.com/netdata/netdata/pull/17377
• https://github.com/netdata/netdata/security/advisories/GHSA-pmhq-4cxq-wj93

Published

Apr 12, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3201The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable…6.4
• CVE-2024-32010A vulnerability has been identified in Spectrum Power 4 (All…8.5
• CVE-2024-32011A vulnerability has been identified in Spectrum Power 4 (All…8.8
• CVE-2024-32014A vulnerability has been identified in Spectrum Power 4 (All…5.6
• CVE-2024-32017RIOT is a real-time multi-threading operating system that su…9
• CVE-2024-32018RIOT is a real-time multi-threading operating system that su…9
• CVE-2024-3202A vulnerability, which was classified as problematic, has be…5.9
• CVE-2024-32020Git is a revision control system. Prior to versions 2.45.1, …3.3
• CVE-2024-32021Git is a revision control system. Prior to versions 2.45.1, …7.1
• CVE-2024-32022Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Koh…9.8
• CVE-2024-32023Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Koh…5.3
• CVE-2024-32024Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Koh…6.5