Authenticated Command Injection in Sonatype Nexus Repository

Compliance Impact

CVE-2026-10748 allows an authenticated user with specific privileges to execute arbitrary operating system commands on the server hosting Sonatype Nexus Repository Manager. This can lead to full server compromise.

Such a compromise could potentially result in unauthorized access to sensitive data, disruption of services, or data breaches, which may impact compliance with standards and regulations like GDPR and HIPAA that require protection of personal and sensitive information.

Organizations using affected versions should mitigate the risk by upgrading to version 3.92.0 or later and restricting the nx-licensing-create privilege to trusted administrators to help maintain compliance.

Useful 0 Not Useful 0

Executive Summary

CVE-2026-10748 is a Remote Code Execution (RCE) vulnerability in Sonatype Nexus Repository Manager 3 versions before 3.92.0.

An authenticated user who has the nx-licensing-create privilege can upload a specially crafted license file.

This malicious license file can cause the server to execute arbitrary operating system commands with the privileges of the Nexus process user.

Useful 0 Not Useful 0

Impact Analysis

Successful exploitation of this vulnerability could lead to full server compromise.

An attacker with the nx-licensing-create privilege can execute arbitrary commands on the server, potentially gaining control over the system.

This can result in unauthorized access, data theft, service disruption, or further attacks within the network.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate the CVE-2026-10748 vulnerability, you should immediately upgrade Sonatype Nexus Repository Manager to version 3.92.0 or later, where the issue has been fixed.

Additionally, review and restrict the nx-licensing-create privilege to trusted administrators only to reduce the risk of exploitation.

Useful 0 Not Useful 0