CVE-2026-113372
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 04, 2026
Vendor
unknown
Description
Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository. A party that holds the key can sign repository metadata as that repository.