Authenticated agents of Nezha Monitoring can forge service-monitor results for services belonging to other users. This flaw allows a legitimate agent to inject false data into monitoring dashboards, potentially misleading administrators, disabling automated alerting, or triggering unnecessary remedial actions. The impact is primarily on data integrity and could lead to incorrect operational decisions or denial of service for the affected services.

The vulnerability affects Nezha Monitoring deployments from version 0.20.0 up to, but not including, 2.0.12. The affected vendor is nezhahq and the product is Nezha Monitoring. Users running any of the impacted releases should verify and apply the patch as soon as possible.

The CVSS score of 7.1 indicates a high severity, and the EPSS score of less than 1% suggests a low probability of public exploitation at the time of this report. The flaw is not listed in CISA’s KEV catalog. The likely attack vector is an authenticated agent able to send crafted monitoring results; the attacker needs valid agent credentials and access to the agent’s control interface. Once the exploit is executed, the attacker can insert malicious data that appears as legitimate monitoring entries for other users’ services.