OpenID Vulnerability in Gitea Affects User Security

CVE-2026-104627

What is CVE-2026-104627?

The OpenID association callback in Gitea's security settings is vulnerable due to inadequate verification of user identity during the linking process. This flaw allows an attacker controlling a malicious OpenID provider to exploit unsolicited assertions, potentially linking their identity to a victim's account. An unsuspecting user, when prompted to follow a crafted link, may inadvertently allow the attacker to authenticate as them, circumventing essential security measures like TOTP or WebAuthn checks. The vulnerability has been addressed by implementing a requirement for a time-limited 'state' value that is explicitly bound to the user, thereby enhancing the robustness of the authentication process.

References