CVE-2026-113372

A flaw was found in Sonatype Nexus Repository. An authenticated user with read-only administrative privileges can retrieve the private signing key of a Yellowdog Updater, Modified YUM proxy or group repository without requiring edit permissions. This information disclosure allows an attacker to...

CVE-2026-113372

Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository. A party that holds the key can sign repository metadat...

EUVD-2026-117059

Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository. A party that holds the key can sign repository metadat...

PT-2026-137114

Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository. A party that holds the key can sign repository metadat...