CVE-2026-101086

6.5 MEDIUMpublic exploit available

Published 2026-09-27 · Updated 2026-09-28

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. Attackers can deliver command execution or Agent configuration tasks to Agents within their authorization scope by exploiting the shared protobuf Task.Type namespace between service monitors and privileged operations.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-269

Public exploit & PoC references

https://github.com/nezhahq/nezha/commit/38824dbc11a63964c5b9296ae4c68e62b34fa04b
https://github.com/nezhahq/nezha/security/advisories/GHSA-grrw-fx36-fv32

All references

https://github.com/nezhahq/nezha/commit/38824dbc11a63964c5b9296ae4c68e62b34fa04b
https://github.com/nezhahq/nezha/security/advisories/GHSA-grrw-fx36-fv32
https://www.vulncheck.com/advisories/nezha-dashboard-before-2.3.5-task-type-validation-bypass

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2025-71421PoC
HIGHCVE-2026-100578PoC
HIGHCVE-2026-100586PoC
MEDIUMCVE-2026-100611PoC
HIGHCVE-2026-100615PoC
LOWCVE-2026-100620PoC
HIGHCVE-2026-100686PoC
HIGHCVE-2026-100801

Related by shared AI tags and CWE weakness class. Browse the full archive.