High · published August 7, 2026
A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment.
| Product | Versions | Fixed in |
|---|---|---|
| sonatype/nexus_repository_manager | ≥ 3.19.0, < 3.95.0 | 3.95.0 |