Administrator escalation via wildcard privilege mutation

Missing authorization in Sonatype Nexus Repository 3.19.0 through 3.94.x allows remote authenticated users to gain full administrative access. The privilege-update path permits a user to broaden a mutable custom wildcard privilege already assigned to the same role without a separate authorization check. Exploitation requires privilege-definition create or update permission and an assigned mutable custom wildcard privilege; successful use grants full control without role reassignment.