Authorization Bypass and Sensitive Information Exposure in Gitea by Gitea

CVE-2026-58432

What is CVE-2026-58432?

A significant security flaw in Gitea arises from a missing authorization check and an incorrect permission assignment, which could allow unauthorized actors to access sensitive resources. This vulnerability enables attackers to bypass standard authorization mechanisms, leading to potential exposure of confidential data and system integrity risks. Users are urged to upgrade to the latest version to mitigate this risk.

References