# CVE-2026-10741: Sonatype Nexus Repository Manager authorization bypass in proxy configuration

Source: https://junglewise.ai/threats/cve-2026-10741-sonatype-nexus-repository-manager-authorization-bypass-in-proxy  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-17. Updated: 2026-06-20  
License: CC BY 4.0 with a link back

CVE-2026-10741 · Severity: info · CVSS 5.9 · Published 2026-06-17

Sonatype Nexus Repository Manager, a tool used by software developers to store and manage software components, contains a security flaw in its proxy repository settings. This vulnerability allows a user with administrative access to a specific repository to view sensitive login credentials for external servers. If exploited, this could lead to unauthorized access to other systems within the organization's software supply chain.

Technologies: [Sonatype Nexus Repository Manager](https://junglewise.ai/threats/technologies/nexus-repository-manager). Vendors: [Sonatype](https://junglewise.ai/threats/vendors/sonatype).

## Quick answers

**Is CVE-2026-10741 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-10741 being exploited in the wild.

**How severe is CVE-2026-10741?** Informational severity, with a CVSS score of 5.9, published 17 June 2026.

**Which products and versions are affected?** Sonatype Nexus Repository Manager before 3.93.0.

**Is there a fix for CVE-2026-10741?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-10741 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-10741?** Check whether you run Sonatype Nexus Repository Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An incorrect authorization vulnerability (CWE-863) exists in Sonatype Nexus Repository Manager versions prior to 3.93.0. The flaw is located within the proxy repository configuration component. A remote attacker with high privileges (specifically a delegated repository administrator) can exploit this vulnerability to disclose stored credentials used for upstream proxy authentication. The attack requires network access to the management interface and specific administrative permissions. The issue is resolved in version 3.93.0.

## Affected products

- Sonatype Nexus Repository Manager before 3.93.0

## Timeline

- 2026-06-17: disclosed
- 2026-06-17: advisory

## References

- [https://help.sonatype.com/en/sonatype-nexus-repository-3-93-0-release-notes.html](https://help.sonatype.com/en/sonatype-nexus-repository-3-93-0-release-notes.html)
- [https://support.sonatype.com/hc/en-us/articles/52341191736851](https://support.sonatype.com/hc/en-us/articles/52341191736851)

## Related threats

- [Sonatype Nexus Repository authorization bypass in blobstore management](https://junglewise.ai/threats/cve-2026-77125-sonatype-nexus-repository-authorization-bypass-in-blobstore)
- [Sonatype Nexus Repository privilege escalation in script execution](https://junglewise.ai/threats/cve-2026-77124-sonatype-nexus-repository-privilege-escalation-in-script)
- [Sonatype Nexus Repository 3 sensitive information disclosure in capability API](https://junglewise.ai/threats/cve-2026-77123-sonatype-nexus-repository-3-sensitive-information-disclosure-in)
- [Sonatype Nexus Repository authorization bypass in REST API](https://junglewise.ai/threats/cve-2026-77122-sonatype-nexus-repository-authorization-bypass-in-rest-api)
- [Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the…](https://junglewise.ai/threats/cve-2026-17603-nexus-repository-3-did-not-sufficiently-restrict-which-hikaricp)