Tenable Vulnerability Management / Tenable Security Center / Nessus: Plugin Updates causing agents to go offline

Incident Report for Tenable Inc

Update

Tenable has released a detailed report of the underlying issue of this incident which can be found using the link below:
https://community.tenable.com/s/article/Nessus-Agent-10-8-0-10-8-1-Plugin-Compilation-Race-Condition-Analysis

Tenable has also released a research highlight guide with a new method of resetting plugins for affected agents via an authenticated scan. Please see the following article for details:
https://community.tenable.com/s/feed/0D5WP00000N5NYu0AN?language=en_US

Posted Jan 07, 2025 - 14:15 EST

Monitoring

We have resumed the plugin feed to allow plugin downloads once again. As a reminder Agent versions 10.8.0 and 10.8.1 have been disabled, however, the plugin feed will be available for all other supported agent versions.

Please see the following FAQ KB article for help with more information in identifying and resolving impacted agents:
https://community.tenable.com/s/article/FAQ-about-Plugin-Update-Issue-with-Nessus-Agent-10-8-0-10-8-1?language=en_US

We have created a KB to help resolve the issue using a GPO script:
https://community.tenable.com/s/article/How-to-Resolve-Nessus-Agent-10-8-0-and-10-8-1-Offline-Issues-using-Group-Policy?language=en_US

Posted Jan 03, 2025 - 18:35 EST

Update

Posted Jan 03, 2025 - 17:36 EST

Update

We are targeting resuming the plugin feed by end of day today to allow plugin downloads once again.

The 10.8.2 agent release notes are available and include upgrade/downgrade notes with more details around the 10.8.0 and 10.8.1 offline agents issue and steps to bring those agents back online:
https://docs.tenable.com/release-notes/Content/nessus-agent/2025.htm#10.8.2

Agent versions 10.8.0 and 10.8.1 have be disabled and are no longer available for download.

Posted Jan 03, 2025 - 12:29 EST

Update

The 10.8.2 agent release notes are available and include upgrade notes with more details around the 10.8.0 and 10.8.1 offline agents issue and steps to bring those agents back online:
https://docs.tenable.com/release-notes/Content/nessus-agent/2025.htm#10.8.2

Agent versions 10.8.0 and 10.8.1 have be disabled and are no longer available for download.

Posted Jan 03, 2025 - 08:03 EST

Update

Posted Jan 03, 2025 - 05:07 EST

Update

Posted Jan 03, 2025 - 02:38 EST

Update

Posted Jan 02, 2025 - 17:55 EST

Update

The Tenable team is releasing version 10.8.2 of the Nessus Agent to fix an issue that may cause some 10.8.0 & 10.8.1 versions to go offline. The accompanying release notes will provided shortly with details for understanding the potential impact and options available to bring these agent instances back online

Posted Jan 02, 2025 - 17:27 EST

Update

Tenable team is actively working on resolving the Plugin Compilation Issue discovered on Nessus Agent version 10.8.0/10.8.1:
-Nessus Agent for TVM, TSC and Nessus are downgraded from 10.8.0/10.8.1 to 10.7
-All plugin feed updates are disabled except:
-TVM Nessus Agent version lower than 10.8
-TVM linked Nessus Scanner (all versions)

Posted Jan 02, 2025 - 11:50 EST

Update

Tenable team is actively working on resolving the Plugin Compilation Issue discovered on Nessus Agent version 10.8.0/10.8.1:
-Nessus Agent for TVM, TSC and Nessus are downgraded from 10.8.0/10.8.1 to 10.7
-All plugin feed updates are disabled except:
-TVM Nessus Agent
-TVM linked Nessus Scanner (all versions)

Impact:
Affected 10.8.0/10.8.1 agents will go offline upon plugin update. No host impact.

Posted Jan 02, 2025 - 11:28 EST

Update

Posted Jan 02, 2025 - 11:02 EST

Update

Our engineering team is continuing to work on a fix for this issue.

Posted Jan 02, 2025 - 08:57 EST

Update

We are continuing to work on a fix for this issue.

Posted Jan 02, 2025 - 07:18 EST

Update

We are continuing to work on a fix for this issue.

Posted Jan 02, 2025 - 00:06 EST

Update

Our engineering team is continuing to work on a fix for this issue.

Posted Jan 01, 2025 - 17:02 EST

Update

Our engineering team is continuing to work on a fix for this issue.

Posted Jan 01, 2025 - 11:55 EST

Update

Our engineering team is continuing to work on a fix for this issue.

Posted Jan 01, 2025 - 07:47 EST

Update

Our engineering team continues to investigate this issue.

Posted Jan 01, 2025 - 07:46 EST

Update

Our engineering team is continuing to work on a fix for this issue.

Posted Jan 01, 2025 - 03:44 EST

Update

Our engineering team is continuing to work on a fix for this issue.

Posted Jan 01, 2025 - 01:24 EST

Update

Our engineering team is continuing to work on a fix for this issue.

Posted Dec 31, 2024 - 23:21 EST

Update

Our engineering team is continuing to work on a fix for this issue.

Posted Dec 31, 2024 - 21:03 EST

Identified

We have identified the cause of the problem. Our engineering team is working to implement a fix for the issue.

Posted Dec 31, 2024 - 18:14 EST

Investigating

We are aware of and actively investigating an issue with agents going offline after plugin updates for certain users on all sites. Plugin updates have been temporarily paused. We will provide periodic updates as our engineers continue working on this issue.

Posted Dec 31, 2024 - 17:20 EST

This incident affects: Tenable Vulnerability Management (AP-SYD-1, BR01, CA01, FRA, IN01, JP01, SING, UAE01, UK-LON-1, US-1A, US-2A, US-2B, US-3A, US-4A, US-5A, US07, US08, GOV01) and Tenable Services (Tenable Plugin Feed Service).