Authorization Flaw in Sonatype Nexus Repository Blobstore Management
CVE-2026-77125

7.1HIGH

Key Information:

Vendor

Sonatype

Status
Nexus Repository 3
Vendor
CVE Published:
2 September 2026

What is CVE-2026-77125?

In Sonatype Nexus Repository 3, an authorization issue was discovered in the blobstore group management REST API endpoints. This flaw allows users with the nexus:blobstores:create permission to perform actions that should be restricted to users with the nexus:blobstores:update permission, such as converting existing blobstores into group blobstores. This unauthorized access can lead to modifications of blobstore configurations without necessary administrator oversight, potentially compromising the integrity and security of the repository.

Affected Version(s)

Nexus Repository 3 3.19.0 < 3.96.0

References

https://help.sonatype.com/en/sonatype-nexus-repository-3-...
patch
https://support.sonatype.com/hc/en-us/articles/5464311443...
vendor-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mayur Udiniya aka roughwire (https://x.com/roughwire/)
.