The vulnerability allows an account that already has script‑execution permission to run any previously created script through the POST /service/rest/v1/script/{name}/run endpoint, even after an administrator has set nexus.scripts.allowCreation=false. As a result, an attacker can execute arbitrary code on the repository server, leading to remote code execution and full system compromise. The weakness is identified by CWE‑184.

Sonatype Nexus Repository 3 is affected in all versions listed in the CPE string list, notably versions 3.21.2 through 3.95.3. Any deployment of these releases without an upgrade to 3.96.0 or later is vulnerable.

The CVSS score of 7.5 indicates a high severity vulnerability. No EPSS value is provided, but the risk is not considered minimal. The vulnerability is not reported in the CISA KEV catalog. Based on the description, the most likely attack vector is an authenticated user holding script‑execution rights; an attacker with such privileges can trigger arbitrary scripts, which under the current configuration still run despite the administrative flag. Proper enforcement of the allowCreation setting is therefore critical for preventing exploitation.