CVE-2026-1133748.6High
CVE-2026-113374: Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation
Sonatype · Nexus Repository 3
Vendor fix available · Affected: Sonatype Nexus Repository 3 · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.04 (4 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
0.3%probability of exploitation in the next 30 days
20th percentile
050100
Higher than 20% of scored CVEs
8.6HighCVSS
LowMediumHighCrit.
DescriptionNVD
Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission (nexus:capabilities:create) can create this capability, which turns on header-based authentication for the instance. A remote client can then authenticate as an existing user, including an administrator, without credentials.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 6 Nov.
- Sonatype fixes seven Nexus Repository flaws enabling SSO bypass and privilege escalationSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.