RCE in Sonatype Nexus Repository 3
CVE-2026-17603
Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to…
Vulnerability class: RCE (Remote Code Execution)
Affected products
- Sonatype Nexus Repository 3 — versions 3.20.0
Weakness classification (CWE)
References
- 103e4ec9-0a87-450b-af77-479448ddef11 (patch)
- 103e4ec9-0a87-450b-af77-479448ddef11 (vendor-advisory)