CVEvulnerability
CVE-2026-26231
8.5 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2026-07-03
- Last modified
- 2026-10-25
- Assigner
- 88ee5874-cf24-4952-aea0-31affedb7ff2
- CVSS 3.1 (88ee5874-cf24-4952-aea0-31affedb7ff2)
- 8.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N
- Weaknesses
- CWE-863
Description
Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to repositories that the user can read but should not be able to write.
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://blog.gitea.com/release-of-1.26.2/ blog.gitea.com
- https://github.com/go-gitea/gitea/pull/37479 github.com
- https://github.com/go-gitea/gitea/pull/37484 github.com
- https://github.com/go-gitea/gitea/releases/tag/v1.26.2 github.com
- https://github.com/go-gitea/gitea/security/advisories/GHSA-mm7c-rhg6-qr4r github.com
- https://github.com/go-gitea/gitea/security/advisories/GHSA-mm7c-rhg6-qr4r github.com