CVE-2023-22497: Netdata is an open source option for real-time infrastructure monitoring and troubleshooting

Q: How do I fix CVE-2023-22497?

netdata: upgrade to 1.37.0. Exact commands for each OS are on this page.

Q: Is CVE-2023-22497 being exploited?

CVE-2023-22497 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2023-22497 affect?

CVE-2023-22497 affects netdata. Severity is medium (CVSS 6.5). Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it wi

Q: How urgent is CVE-2023-22497?

Priority 46/100. Public exploit reference; Remotely exploitable, no login, no user action

This week

MEDIUM 6.5REMOTEUPGRADE

CVE-2023-22497 is a medium-severity flaw (CVSS 6.5) affecting netdata. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has access to a Netdata Agent has access to its MACHINE_GUID. Streaming is a feature that allows a Netdata Agent to act as parent for other Netdata Agents (chi

Why this priority

Public exploit reference
Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score	6.5 (Medium)
Attack vector	Network (remote)
Attack complexity	High
Privileges needed	None
User interaction	None
EPSS exploit chance	0.7% (top 47%)
CISA exploited list	No
Weakness	CWE-287, CWE-668
Published	2023-01-14
Last modified	2026-06-17

Publisher (CNA): GitHub, Inc. · Vendor: netdata

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2023-01-14 02:15 UTCPublished CVE record published
2026-06-17 05:35 UTCUpdated Record last modified

netdata netdata UPGRADE

Affected: < 1.37.0

Fixed in: 1.37.0

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy netdata || rpm -q netdata || netdata --version

2. UPGRADE to 1.37.0 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade netdata

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade netdata

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-22497?

netdata: upgrade to 1.37.0. Exact commands for each OS are on this page.

Is CVE-2023-22497 being exploited?

CVE-2023-22497 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-22497 affect?

CVE-2023-22497 affects netdata. Severity is medium (CVSS 6.5). Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it wi

How urgent is CVE-2023-22497?

Priority 46/100. Public exploit reference; Remotely exploitable, no login, no user action

Related CVEs

CVE-2025-71385 MEDIUM 6.1 UPGRADE Netdata before 2.3.1 reflects the user-supplied love query parameter of the api/v2/ilove.svg and api/v3/ilove.
CVE-2023-22496 HIGH 8.1 UPGRADE Netdata is an open source option for real-time infrastructure monitoring and troubleshooting
CVE-2019-9834 MEDIUM 6.1 UPGRADE The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code int
CVE-2018-18839 MEDIUM 5.3 DOWNGRADE An issue was discovered in Netdata 1.10.0
CVE-2018-18838 HIGH 7.5 DOWNGRADE An issue was discovered in Netdata 1.10.0

References

← Back to latest CVEs