CVE-2026-77125
Received Received - Intake

Unauthorized Blobstore Group Modification in Sonatype Nexus Repository

Publication date: 2026-09-02

Last updated on: 2026-09-02

Assigner: Sonatype

Description
A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly enforce the intended authorization check. A user granted only the nexus:blobstores:create permission could invoke these endpoints to convert an existing blobstore into a group blobstore, an action that should require the nexus:blobstores:update permission instead. This could result in unauthorized modification of blobstore configuration without administrator approval. The nexus:blobstores:create permission is a named permission that must be explicitly granted by an administrator; it is not held by default.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-02
Last Modified
2026-09-02
Generated
2026-09-02
AI Q&A
2026-09-02
EPSS Evaluated
N/A
NVD
CVE-2026-77125
EUVD
EUVD-2026-70228

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
sonatype nexus_repository 3
sonatype nexus_repository to 3.95.x (inc)
sonatype nexus_repository 3.96.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Sonatype Nexus Repository 3 involves two blobstore group management REST API endpoints that did not enforce proper authorization checks. A user with only the nexus:blobstores:create permission could convert an existing blobstore into a group blobstore, which should require the nexus:blobstores:update permission. This allows unauthorized modification of blobstore configurations without administrator approval.

Detection Guidance

Check Nexus Repository version with: curl -s http://localhost:8081/service/rest/v1/status | grep version. If version is between 3.19.0 and 3.95.x, the system is vulnerable. Review REST API logs for unauthorized blobstore group modifications or unexpected nexus:blobstores:create permission usage.

Impact Analysis

This vulnerability could allow unauthorized users to modify blobstore configurations, potentially leading to data integrity issues, unauthorized access to stored data, or disruption of repository services. Attackers could misuse this to alter storage settings without proper approval.

Compliance Impact

This vulnerability may impact compliance with GDPR and HIPAA by enabling unauthorized changes to data storage configurations, potentially violating integrity and access control requirements. Unauthorized modifications could lead to data breaches or loss of audit trails.

Mitigation Strategies

Upgrade to Nexus Repository 3.96.0 or later immediately. If upgrade is not possible, restrict nexus:blobstores:create permission to only trusted administrators. Monitor blobstore configurations for unauthorized changes and review user permissions regularly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77125. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart