Is Netdata 2.8.1 affected?

CVSS 8.4

7 known vulnerabilities affect 2.8.1 (highest CVSS 8.4).

14 newer releases in its track, up to 2.12.1. What changed up to 2.12.1

Vulnerabilities affecting 2.8.1

8.4
CVE-2026-83603 Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE fixed in 2.10.0-782-nightly
7.8
CVE-2026-83598 Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair fixed in 2.10.0-782-nightly
7.5
CVE-2026-83599 WebSocket Decompression Bomb fixed in 2.10.0-782-nightly
7.0
CVE-2026-83597 Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution fixed in 2.10.0-782-nightly
6.5
CVE-2026-83602 Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK fixed in 2.10.0-782-nightly
6.5
CVE-2026-83600 Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent fixed in 2.10.0-782-nightly
6.5
CVE-2026-83601 Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write fixed in 2.10.0-782-nightly