CVE-2026-3199

critical · 9.4

A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control.

9.4

CVSS

0.6%

EPSS (exploit prob.)

45th

EPSS percentile

2026-04-08

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-502

Affected products

Vendor	Product	Affected versions
sonatype	nexus_repository_manager	>= 3.22.1, < 3.91.0

Check a specific version with /api/v1/cve/match.

References

https://help.sonatype.com/en/sonatype-nexus-repository-3-91-0-release-notes.html
https://support.sonatype.com/hc/en-us/articles/50615414548499

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-3199