Repository Migration Vulnerability in Gitea by Gitea Team
CVE-2026-70357

7.5HIGH

Key Information:

Vendor

Gitea

Status
Gitea
Vendor
CVE Published:
6 October 2026

What is CVE-2026-70357?

A vulnerability in Gitea's repository migration process allows an attacker to manipulate DNS entries when a repository migration is initiated. While Gitea checks the hostname against its allow and block lists, the Git subprocess that performs the cloning operation resolves the hostname independently. This design flaw means that an attacker controlling the destination's DNS can redirect the connection to a previously blocked internal address after the initial validation step, potentially exposing sensitive internal network resources.

Affected Version(s)

Gitea 0 <= 1.27.3

References

https://github.com/go-gitea/gitea/security/advisories/GHS...
vendor-advisory
https://github.com/go-gitea/gitea/pull/39426
patch
https://blog.gitea.com/release-of-28.0.0/
release-notes

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

https://github.com/tikket1
https://github.com/SAJ0x00IN
https://github.com/vuductruong12
https://github.com/lilmingwa13
https://github.com/rajivraj
https://github.com/ahmdobeidat
https://github.com/TheFox0x7
https://github.com/silverwind
https://github.com/bircni
https://github.com/wxiaoguang
.