Critical severityNVD Advisory· Published Apr 8, 2026· Updated Apr 13, 2026

CVE-2026-3199

Description

A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sonatype/Nexus Repositoryllm-fuzzy
Range: >=3.22.1 <=3.90.2

Patches

Vulnerability mechanics

References

help.sonatype.com/en/sonatype-nexus-repository-3-91-0-release-notes.htmlnvd
support.sonatype.com/hc/en-us/articles/50615414548499nvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000