First check Important advisories of known security vulnerabilities in Sonatype products to see if this has been previously reported.

If you believe you have found a security vulnerability, please use our Bug Bounty Program to disclose responsibly.