Service Disruption Vulnerability in Nezha Monitoring Tool

CVE-2026-100394

What is CVE-2026-100394?

A vulnerability exists in the Nezha Monitoring tool versions 2.2.7 to 2.2.11 that can lead to service disruptions. Specifically, the ServiceSentinel.worker may encounter a nil pointer dereference when it checks an owned service. This happens if a RoleMember concurrently deletes a service while reporting TCP or ICMP results through the member's agent. The lack of a recovery interceptor in the gRPC server results in the dashboard process terminating unexpectedly, affecting the availability of the web interface, REST API, and agent connections for all tenants. This issue has been addressed in Nezha Monitoring versions 2.2.11 and 2.3.0.

References