Authorization Flaw in Gerrit by Google Affects Code Submission Features

CVE-2026-2725

What is CVE-2026-2725?

An improper authorization vulnerability exists in the 'submitted together' feature of Gerrit versions 2.12 and later. This flaw allows authenticated attackers with force push permissions on a secondary branch to circumvent the established code review processes. By exploiting this issue, an attacker can craft a submission that matches the 'topic' tag of an unapproved change, enabling them to force submit code directly to restricted branches without undergoing the necessary scrutiny. This could have significant implications for code integrity and project security.

References