This vulnerability (CWE-862) in Sonatype Nexus Repository 3 version 3.19.0 involves missing authorization checks when a user with permission to update privilege definitions modifies a wildcard privilege assigned to their own role. This flaw enables privilege escalation by broadening permissions beyond what the user is authorized to hold, including full administrative rights, without additional authorization or role changes.

An attacker with limited privileges to update privilege definitions can escalate their access to full administrative control of the Nexus Repository 3 instance. This could lead to unauthorized configuration changes, data access, or disruption of repository services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict the permission to update privilege definitions to trusted administrators only and monitor for unauthorized privilege changes.