CVE-2026-97712 — Nexus Repository 3 - Privilege Escalation via Role Management
Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the us…
Published: 2026-10-15 · CVSS: 8.7 · CVSS 4.0
Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7