CVE-2026-97712

CVE-2026-97712 · Nexus Repository 3 - Privilege Escalation via Role Management

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access.

CVSS 8.7 · High · EPSS 0.3% · Fix available

Published

2026-10-15T15:34:40.948Z

Updated

2026-10-16T03:56:56.472Z

Check your server →