Access Control Flaw in Gitea Affects Privileged Resource Management

CVE-2025-68941

What is CVE-2025-68941?

Gitea, a popular self-hosted Git service, has a vulnerability that arises from improper handling of access rights. Specifically, when an API token with limited scope to public resources is used, it inadvertently grants access to private resources. This flaw can potentially allow unauthorized users to manipulate or gain insights into private data, compromising the integrity of the application. It is essential for users to update to version 1.22.3 or later to mitigate this risk and ensure secure access management.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References