Skip to content
Threat Feed

Tag

Cron

1 brief RSS
critical advisory

Nezha Monitoring Cross-Tenant RCE via Cron Task Injection

A RoleMember in Nezha monitoring dashboard can achieve cross-tenant remote code execution by injecting arbitrary commands into cron tasks due to insufficient authorization checks, impacting all monitored hosts in the deployment.

nezha rce privilege-escalation cron authorization
3r 3t