Vulnerability · Published Nov 4, 2026 · Assigned by Sonatype

CVE-2026-113374Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation

High 8.6

In plain English

A high-severity missing authorization in Nexus Repository 3 from Sonatype. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).

Severity (CVSS 4.0)8.6High

Exploit odds (30 days)0.3%top 79.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission (nexus:capabilities:create) can create this capability, which turns on header-based authentication for the instance. A remote client can then authenticate as an existing user, including an administrator, without credentials.

Affected products (as reported)

Vendor	Product	Versions
Sonatype	Nexus Repository 3	3.0.0 – before 3.98.0

Weakness: CWE-862 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

In plain English

Official description

Affected products (as reported)

References