What is GHSA-w2wq-7mq5-mvww?

GHSA-w2wq-7mq5-mvww is a security advisory published by GitHub Security Advisories with Critical severity. A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1...

Which CVE IDs does GHSA-w2wq-7mq5-mvww cover?

GHSA-w2wq-7mq5-mvww covers the following CVE IDs: CVE-2026-3199. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w2wq-7mq5-mvww?

GHSA-w2wq-7mq5-mvww has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-w2wq-7mq5-mvwwCriticalCVSS 8.8

A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1...

Vendor

GitHub Security Advisories

Published

April 9, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-3199 →

📋 Description

A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-3199
https://help.sonatype.com/en/sonatype-nexus-repository-3-91-0-release-notes.html
https://support.sonatype.com/hc/en-us/articles/50615414548499
https://github.com/advisories/GHSA-w2wq-7mq5-mvww