---
title: Security Bulletin NR18-11
source: https://docs.newrelic.com/docs/security/new-relic-security/security-bulletins/security-bulletin-nr18-11
---

## Summary

A security update for the Windows Infrastructure agent corrects an issue where the agent may execute privileged binaries in the system path.

**Release date:** October 8, 2018

**Vulnerability identifier:** NR18-11

**Priority:** Medium

## Affected software [#affected]

The following New Relic agent versions are affected:

| Name                         | Affected version         | Notes | Remediated version |
| ---------------------------- | ------------------------ | ----- | ------------------ |
| Windows Infrastructure agent | From 1.0.829 to 1.0.1002 |       | 1.0.1015           |

## Vulnerability information [#vuln-info]

The New Relic Windows Infrastructure agent may execute system commands as part of its normal operation. In affected versions of the Windows Infrastructure agent, a malicious user with permission to change the system PATH could potentially abuse this functionality to run arbitrary binaries with elevated privileges.

### Mitigating factors [#factors]

-   This vulnerability only exists on Windows systems.
-   This vulnerability requires existing access to the system and permission to modify the system PATH.

## Workarounds

[Upgrade to the latest New Relic Windows Infrastructure agent.](https://docs.newrelic.com/docs/infrastructure/new-relic-infrastructure/installation/update-infrastructure-agent)

## Report security vulnerabilities to New Relic [#report]

New Relic is committed to the security of our customers and their data. If you believe you have found a security vulnerability in one of our products or websites, we welcome and greatly appreciate you reporting it to New Relic's coordinated disclosure program. For more information, see [Reporting security vulnerabilities](https://docs.newrelic.com/docs/security/new-relic-security/data-privacy/reporting-security-vulnerabilities).

## For more help [#more_help]

Additional documentation resources include:

-   [Upgrade the Infrastructure agent](https://docs.newrelic.com/docs/infrastructure/new-relic-infrastructure/installation/update-infrastructure-agent)
-   [Upgrade the .NET agent](https://docs.newrelic.com/docs/agents/net-agent/installation/update-net-agent)
-   [Upgrade the Java agent](https://docs.newrelic.com/docs/agents/java-agent/installation/upgrade-java-agent)
-   [Upgrade the Python agent](https://docs.newrelic.com/docs/agents/python-agent/installation-configuration/upgrade-python-agent)
-   [NR Security](https://newrelic.com/security)