Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.6
CVE-2026-14644: Nexus Repository 3 lets privileged user become admin
CVE-2026-14644 · published 2 months ago
Summary
In Nexus Repository 3, a user who can manage permissions may be able to increase their own rights to full administrator by exploiting a coding error in the permission‑change API. This could give the user control over all repository settings and data. Review and tighten permission configurations, apply the latest patches from the vendor, and restrict who can edit privileges.
What to do
- Update sonatype nexus repository 3 to version 3.95.0 or later.
- Update sonatype nexus_repository_manager to version 3.95.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| sonatype | nexus repository 3 | < 3.95.0 |
| sonatype | nexus_repository_manager |
>= 3.19.0, < 3.95.0 cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:* |
Original advisory text
Nexus Repository 3 - Privilege Escalation
Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege update endpoint.
References
- https://support.sonatype.com/hc/en-us/articles/53157550694675 Vendor Advisory
- https://help.sonatype.com/en/sonatype-nexus-repository-3-95-0-release-notes.html Patch
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/14xxx/CVE-2026-14644... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-14644 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.6
High
Type
CWE-843Type Confusion
Timeline
Published7 Aug 2026
Updated4 Nov 2026
First seen7 Aug 2026
Track software like this
Free during beta