CVE-2026-17594
Received Received - Intake

Incorrect Authorization in Nexus Repository 3 CE/Pro Allows Unauthorized Repository Creation

Publication date: 2026-08-07

Last updated on: 2026-08-07

Assigner: Sonatype

Description
Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of a different, unauthorized format, because authorization was checked against one request field while a separate, attacker-controlled field determined the repository format actually created. This does not affect the anonymous user, which cannot hold this privilege by default. Fixed in version 3.95.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-07
Last Modified
2026-08-07
Generated
2026-08-07
AI Q&A
2026-08-07
EPSS Evaluated
N/A
NVD
CVE-2026-17594
EUVD
EUVD-2026-54520

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
sonatype nexus_repository From 3.0.0 (inc) to 3.94.x (inc)
sonatype nexus_repository 3.95.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Nexus Repository 3 allows a user with limited repository-admin privileges to bypass authorization checks and create repositories of unauthorized formats. The server checks one field for permission but uses a different attacker-controlled field to determine the repository type created.

Detection Guidance

Check Nexus Repository versions to identify if any instances are running versions 3.0.0 through 3.94.x. Use commands like 'curl -s http://<nexus-server>/service/rest/v1/status' or check the version in the Nexus UI under Administration > System > System Information.

Impact Analysis

An attacker with a valid account and delegated repository-admin privileges could create repositories they are not authorized to manage, potentially gaining unauthorized access to sensitive data or system resources. This could lead to data breaches or unauthorized modifications.

Compliance Impact

This vulnerability could lead to unauthorized access or data exposure, which may violate compliance requirements such as GDPR or HIPAA. Organizations must ensure proper access controls to maintain regulatory compliance.

Mitigation Strategies

Upgrade Nexus Repository to version 3.95.0 or later immediately. If upgrading is not possible, restrict repository-admin privileges to only trusted accounts and remove any unnecessary delegated permissions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17594. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart