This vulnerability (CVE-2026-5189) arises from hard-coded credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5. When the configuration nexus.orient.binaryListenerEnabled is set to true (which is not the default), an unauthenticated attacker with network access can leverage these credentials to gain unauthorized read/write access to the internal database. Additionally, the attacker can execute arbitrary operating system commands with the privileges of the Nexus process user. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not provided an official fix or remediation level, and no patch links are available.

Exploitation of this vulnerability allows an unauthenticated remote attacker to gain unauthorized read and write access to the Nexus Repository internal database and execute arbitrary OS commands as the Nexus process user. This can lead to full compromise of the affected Nexus Repository instance, including potential data manipulation, service disruption, and further lateral movement within the environment. The critical CVSS score of 9.2 reflects the severity of these impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to verify that the non-default configuration nexus.orient.binaryListenerEnabled is not enabled (i.e., ensure it remains set to false or is unset) to prevent exploitation. Monitor vendor communications for updates on patches or official mitigations.