CVE-2026-17594

Name of the Vulnerable Software and Affected Versions Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x

Description An incorrect authorization issue exists in the repository-creation user interface. A user account with delegated repository-admin privileges for a specific repository format can create a repository of a different, unauthorized format. This occurs because the system validates authorization against one request field, while a separate field controlled by the user determines the actual format of the created repository. This issue does not affect anonymous users as they do not possess this privilege by default.

Recommendations Update Nexus Repository 3 CE/Pro to version 3.95.0.