Medium WID-SEC-2026-1637 7 CVEs

Gitea: Mehrere Schwachstellen

Published May 21, 2026 · Updated Jul 5, 2026 · Revision 3 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um möglicherweise erweiterte Privilegien zu erlangen, Sicherheitsmaßnahmen zu umgehen oder Daten zu manipulieren und offenzulegen.

Product

Gitea ist ein quelloffener Github-Klon.

Vulnerabilities 7

Critical 9.1

CVE-2026-20706

Gitea repository archive downloads bypass token scope checks

Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass token scope checks on the web archive download endpoint.

Gitea Gitea Open Source Git Server code.gitea.io/gitea Go

Jul 3, 2026
High 8.5

CVE-2026-26231

Gitea maintainer-edit permissions allow unauthorized commits to readable repositories

Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to repositories that the user can read but should not be able to write.

Gitea Gitea Open Source Git Server code.gitea.io/gitea Go

Jul 3, 2026
High 8.2

CVE-2026-27771 Public exploit Scanner template

Gitea Composer package source links use insufficient permission checks

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.

Gitea Gitea Open Source Git Server code.gitea.io/gitea Go

Jul 3, 2026
High 8.1

CVE-2026-28699 Public exploit

Gitea Basic Auth bypasses OAuth2 access token scopes

Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypassed through HTTP Basic authentication.

Gitea Gitea Open Source Git Server code.gitea.io/gitea Go

Jul 3, 2026
High 8.1

CVE-2026-28744

Gitea Git smart HTTP bypasses repository token scopes for bearer tokens

Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with bearer tokens to bypass repository token scope checks.

Gitea Gitea Open Source Git Server code.gitea.io/gitea Go

Jul 3, 2026
Medium 4.3

CVE-2026-25714

Gitea user organization API bypasses public-only token filtering

Gitea versions up to and including 1.26.1 do not apply public-only token filtering consistently to the user organization API, leaving an incomplete fix for CVE-2025-68941.

Gitea Gitea Open Source Git Server code.gitea.io/gitea Go

Jul 3, 2026
Medium 4.3

CVE-2026-27783

Gitea issue-template APIs bypass repository unit authorization

Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on issue-template API endpoints.

Gitea Gitea Open Source Git Server code.gitea.io/gitea Go

Jul 3, 2026

Revision history

2026-07-05 #3
Referenz(en) aufgenommen: EUVD-2026-41635, EUVD-2026-41644, EUVD-2026-41627, EUVD-2026-41639, EUVD-2026-41640, EUVD-2026-41612, EUVD-2026-41623
2026-05-25 #2
Exploit aufgenommen
2026-05-21 #1
Initiale Fassung

References

Gitea Release Notes vom 2026-05-21
https://blog.gitea.com/release-of-1.26.2
PoC für CVE-2026-28744
https://github.com/go-gitea/gitea/security/advisories/GHSA-cc8w-r4qh-3v65