Skip to content
OpenAdvisories

Product · Gitea

act_runner

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-58053

    Gitea act_runner - Container Hardening Bypass via Workflow Container Options

    Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as…

    Gitea act_runner