CVE-2026-97712: Nexus Repository 3 - Privilege Escalation via Role Management
Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access.
Affected Software
Event History
Frequently Asked Questions
Which users are exposed to this privilege escalation?
Any Nexus Repository 3 user with permission to create or update roles is exposed. Such a user can assign roles and privileges beyond those already held by their own account, potentially obtaining full administrative access.
What access does an attacker need to exploit this issue?
The attacker needs an authenticated Nexus Repository 3 account that has either role create or role update permission. No other prerequisite is specified in the available information.
How can administrators identify accounts that may be able to escalate privileges?
Review users and assigned roles for permissions that allow role creation or role updates. Accounts with either permission should be treated as capable of granting themselves additional access under the affected behavior.