CVE-2026-100394

Name of the Vulnerable Software and Affected Versions Nezha Monitoring versions 2.2.7 through 2.2.10

Description A nil pointer dereference occurs in the ServiceSentinel.worker function within service/singleton/servicesentinel.go. The issue arises when the worker checks an owned service under servicesLock and subsequently dereferences serviceStatusToday and serviceCurrentStatusData entries under serviceResponseDataStoreLock without verifying if ServiceSentinel.Delete has removed them. A RoleMember can trigger this by concurrently reporting TCP or ICMP results via their agent while deleting the same owned service. Since the gRPC server lacks a recovery interceptor, the resulting worker panic terminates the entire dashboard process, disrupting the web interface, REST API, and agent connections for all tenants. This issue impacts availability and does not result in data disclosure or modification.

Recommendations Update to version 2.2.11 or 2.3.0.