CVE-2026-113372
Description
A flaw was found in Sonatype Nexus Repository. An authenticated user with read-only administrative privileges can retrieve the private signing key of a Yellowdog Updater, Modified (YUM) proxy or group repository without requiring edit permissions. This information disclosure allows an attacker to sign repository metadata as that repository, potentially enabling the spoofing or tampering of software packages.
Statement
This vulnerability is rated as a Moderate impact because exploitation requires a valid authenticated account with administrative read privileges, preventing remote unauthenticated exploitation. While exposure of the signing key allows an attacker to forge repository signatures, the vulnerability cannot be exploited by unprivileged consumers. Furthermore, Sonatype Nexus Repository is not bundled or distributed as a core component within Red Hat products, limiting exposure in standard enterprise deployments.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Confidentiality
Technical Impact: Read Files or Directories; Read Memory; Read Application Data
Sensitive data may be exposed to attackers.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
