CVE-2026-17601: Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator
A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-17601?
The severity of CVE-2026-17601 is rated at 73, indicating a high-risk vulnerability.
How do I fix CVE-2026-17601?
To fix CVE-2026-17601, ensure that users with privilege definitions cannot modify wildcard privileges without proper oversight.
What software is affected by CVE-2026-17601?
CVE-2026-17601 affects the Sonatype Nexus Repository 3 software.
What type of vulnerability is CVE-2026-17601?
CVE-2026-17601 is a wildcard privilege update self-escalation vulnerability that can lead to unauthorized administrative access.
What can happen if CVE-2026-17601 is exploited?
If exploited, CVE-2026-17601 allows a user to gain full administrative access by modifying their own role's privileges.