CVE-2026-113368
Description
A flaw was found in Sonatype Nexus Repository. This vulnerability allows an authenticated attacker with privileges to add or edit group repositories to bypass access controls, leading to information disclosure. Because the application does not verify whether an account is authorized to access an individual repository before adding it to a group repository, the attacker can add a restricted repository to a group they manage and read its contents.
Statement
This vulnerability is rated as Moderate impact because successful exploitation requires an authenticated account with existing permissions to modify group repositories, restricting the potential blast radius. By default, anonymous accounts cannot configure repositories, preventing unauthenticated attacks unless an administrator has explicitly granted elevated privileges. Additionally, the exposure is limited to unauthorized information disclosure of aggregated repository data without enabling data tampering or arbitrary command execution.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Confidentiality,Integrity
Technical Impact: Read Application Data; Modify Application Data
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
