Buffer Overflow Vulnerability in Netdata Observability Tool

CVE-2026-83601

What is CVE-2026-83601?

Netdata is an open-source observability tool that, prior to version 2.10.4, is susceptible to a buffer overflow due to an unbounded DIMENSION SLOT value sent by an authenticated child agent. This vulnerability occurs in the pluginsd_rrddim_put_to_slot function, where the size of the array allocation can be calculated incorrectly. As a result, the initialization loop may write past the allocated memory for the heap, leading to a crash of the parent agent. This issue has been addressed in the latest release.

References