THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-3199 (HIGH 8.8) — A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control.

[NVD] CVE-2026-3199 (HIGH 8.8) — A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control.

lownvdPublished 2026-04-08

CVE-2026-3199 CVSS: 8.8 HIGH Published: 2026-04-08T23:16:59.160

A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control.

Indicators of compromise

CVE-2026-3199cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-3199