CVE-2026-113374 | BDVDB-2026-400259 Detail

Description#

Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission (nexus:capabilities:create) can create this capability, which turns on header-based authentication for the instance. A remote client can then authenticate as an existing user, including an administrator, without credentials.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-11-04Record published in the CVE List.
2. Version 22026-11-09Most recent update recorded in the CVE List.