Repository Visibility Manipulation in Gitea by Gitea
CVE-2026-58437

Currently unrated

Key Information:

Vendor

Gitea

Status
Gitea Open Source Git Server
Vendor
CVE Published:
13 August 2026

What is CVE-2026-58437?

A security vulnerability in Gitea allows attackers to manipulate repository visibility through Git push options. This flaw can lead to unauthorized access to sensitive repositories, posing risks to the integrity and confidentiality of data. Users are encouraged to review the GitHub Security Advisory and update to the latest version to mitigate this vulnerability.

Affected Version(s)

Gitea Open Source Git Server 0 <= 1.26.4

References

https://github.com/go-gitea/gitea/security/advisories/GHS...
vendor-advisory
https://github.com/go-gitea/gitea/releases/tag/v1.27.0
release-notes
https://blog.gitea.com/gitea-1.27.0-is-released/
release-notes

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

prakhar0x01
.