Repository Access Bypass in Gitea for Team Management

CVE-2026-58433

What is CVE-2026-58433?

A vulnerability has been identified in Gitea where the team-repository linking endpoint allows users to bypass the RepoAdminChangeTeamAccess organization setting. This flaw can potentially enable unauthorized team members to gain access to repositories, circumventing organization-level access controls. Users of Gitea are advised to update to the latest version where this issue has been addressed to enhance security and maintain data integrity.

References