Vulnerability Intelligence Report
Nexus Repository 3 - Authorization Bypass in Repository Creation
CVE-2026-17594
Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of a different, unauthorized format, because authorization was checked against one request field while a separate, attacker-controlled field determined the repository format actually created. This does not affect the anonymous user, which cannot hold this privilege by default. Fixed in version 3.95.0.
Nuclei Template
CVSS Base Score
8.2
HIGH
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-863 ↗CWE-863 Incorrect Authorization
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Sonatype | Nexus Repository 3 | 3.0.0 < 3.95.0 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Nuclei Template
SCANNER AVAILABLE
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Sonatype Inc. · Vendor · USA |
| Reserved | 2026-07-27T16:30:02 |
| Published | 2026-08-07T16:07:43 |
| Last Updated | 2026-08-07T18:11:14 |
Community Chatter & Buzz