Cpe:2.3:a:sonatype:nexus_repository_3_pro:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3asonatypenexus_repository_3_pro/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 00:21:29 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSonatype Nexus Repository 3 Pro: Authentication bypass (CVE-2026-113373)https://feed.craftedsignal.io/briefs/2026-11-nexus-auth-bypass/Thu, 05 Nov 2026 00:21:29 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-nexus-auth-bypass/Sonatype Nexus Repository 3 Pro is vulnerable to an authentication bypass (CVE-2026-113373) that allows locked or disabled users to successfully authenticate via SAML or OAuth2/OpenID Connect and gain an active session.Sonatype Nexus Repository 3 Pro fails to validate the local account status of users when authenticating via SAML or OAuth2/OpenID Connect identity providers. An account that has been disabled or locked by an administrator remains able to initiate a session by authenticating against the external identity provider. Upon successful external authentication, the repository grants the user a session with all roles associated with the existing, albeit disabled, local account. This vulnerability allows an attacker possessing valid credentials for the identity provider to bypass account lockout controls.

Impact

Successful exploitation results in an unauthorized, authenticated session within Nexus Repository 3 Pro with the permissions assigned to the target account. This bypasses organizational policies intended to revoke access for terminated or suspended users.

Recommendation

  • Upgrade to the latest version of Nexus Repository 3 Pro as specified in the official release notes to remediate CVE-2026-113373.
  • Audit administrative logs for unusual authentication patterns for accounts previously marked as disabled or locked.
  • Review SAML and OAuth2/OpenID Connect configurations for administrative users to ensure local status checks are enforced if supported by the integration.
]]>highadvisoryauth-bypassauthenticationwebserver