CVE-2026-3199: Nexus Repository 3 - Authenticated Remote Code Execution via Task Property Injection
A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3199?
CVE-2026-3199 is categorized as a critical vulnerability due to its potential for authenticated remote code execution.
How do I fix CVE-2026-3199?
To fix CVE-2026-3199, upgrade Sonatype Nexus Repository to version 3.91.0 or later.
Who is affected by CVE-2026-3199?
CVE-2026-3199 affects all authenticated users with task creation permissions in Sonatype Nexus Repository versions 3.22.1 through 3.90.2.
What type of attack can be executed using CVE-2026-3199?
An attacker can execute arbitrary code via task property injection due to CVE-2026-3199.
Is there a workaround for CVE-2026-3199?
There is no documented workaround for CVE-2026-3199 other than upgrading to a secure version.