PT-2026-31544 · Sonatype · Sonatype Nexus Repository

Wes Clemons · Published 2026-04-08 · Updated 2026-04-08 · CVE-2026-3199

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository versions 3.22.1 through 3.90.2

Description A flaw exists in the task management component of Sonatype Nexus Repository. An authenticated attacker possessing task creation permissions can execute arbitrary code, circumventing the nexus.scripts.allowCreation security control. This allows an attacker to potentially gain control of the entire artifact repository.

Recommendations Update Sonatype Nexus Repository to a version later than 3.90.2.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-3199

Affected Products

Sonatype Nexus Repository

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-3199 · Security Note
• https://help.sonatype.com/en/sonatype-nexus-repository-3-91-0-release-notes.html · Patch
• https://support.sonatype.com/hc/en-us/articles/50615414548499 · Vendor Advisory
• https://twitter.com/infoflowcloud/status/2042013002413613242 · Twitter Post
• https://twitter.com/0dayPublishing/status/2042005701355036878 · Twitter Post
• https://twitter.com/CVEnew/status/2042010555880260093 · Twitter Post