CVE-2026-97712

8.7High

Published 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash

8.7High

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-862

Impact

Authenticated users with role-creation or role-modification privileges can elevate themselves to full administrator access. They only need standard network access to Nexus and an account with basic role management rights.

Root cause

Improper authorization checks permit users modifying or creating roles to assign privileges and roles they do not personally possess.

Affected systems

Sonatype Nexus Repository 3 versions prior to 3.97.0.

CVSS v4.0 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Fix & remediation

Upgrade to Sonatype Nexus Repository 3.97.0 or later. If patching immediately is not possible, temporarily revoke role create and role update permissions from all non-administrative users.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-97712