CVE-2026-48119 — Nezha Monitoring: Authenticated agents can forge service-monitor results for other users' services

CVE-2026-48119

Nezha Monitoring: Authenticated agents can forge service-monitor results for other users' services PUBLISHED

Description (CNA)

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.12, authenticated agents can forge service-monitor results for other users' services. This issue has been patched in version 2.0.12.

Affected (CNA)

Vendor / product	Versions
nezhahq / nezha	affected >= 0.20.0, < 2.0.12

CWE

CWE-862

References

https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm

ADP enrichment

CISA-ADP

No English description supplied.

https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm