Write Permission Escalation in Gitea by Go Gitea
CVE-2026-27775

8.8HIGH

Key Information:

Vendor

Gitea

Status
Gitea Open Source Git Server
Vendor
CVE Published:
3 July 2026

What is CVE-2026-27775?

In Gitea version 1.25.5, a vulnerability has been identified that allows branch-specific write permission results to be cached during pre-receive hook sessions. This flaw can be exploited, as a maintainer's edit privileges for a specific branch can be misused to gain write access to other references within the repository, potentially leading to unauthorized changes or exposures. It is crucial for users to upgrade to the latest version to mitigate this risk.

Affected Version(s)

Gitea Open Source Git Server 1.25.5

References

https://github.com/go-gitea/gitea/security/advisories/GHS...
vendor-advisory
https://github.com/go-gitea/gitea/pull/38151
patch
https://github.com/go-gitea/gitea/releases/tag/v1.26.3
release-notes

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

adrian-doyensec
.