This vulnerability (CVE-2026-5189) arises from the use of hard-coded credentials (CWE-798) in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5. When the configuration setting nexus.orient.binaryListenerEnabled is set to true (which is not the default), an unauthenticated attacker with network access can leverage these credentials to gain unauthorized read/write access to the internal database. This access further allows execution of arbitrary OS commands with the privileges of the Nexus process user. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an unauthenticated remote attacker to fully compromise the Nexus Repository internal database and execute arbitrary commands on the host operating system with the same privileges as the Nexus process user. This can lead to complete system compromise, data manipulation, and disruption of repository services. The vulnerability is critical with a CVSS score of 9.2, reflecting severe impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should verify if the nexus.orient.binaryListenerEnabled configuration is enabled and consider disabling it if not required, as exploitation depends on this setting being true. Monitor vendor communications for updates and apply any official patches or mitigations once available.