Container Isolation Vulnerability in Gitea Runner by Gitea

CVE-2026-73802

What is CVE-2026-73802?

The Gitea Runner software has a significant vulnerability that allows workflow authors to manipulate container options for Docker jobs, even when running in a non-privileged mode. This flaw enables unauthorized access to host namespaces and the execution of commands with root privileges on the runner host, undermining the isolation that Docker containers are supposed to provide. Affected users must be aware of this issue as it poses serious risks to their systems and configurations.

References