Blind SSRF Vulnerability in Gitea Affects Unauthenticated OpenID Sign-In Processing

CVE-2026-78231

What is CVE-2026-78231?

The identified vulnerability in Gitea arises when OpenID sign-in is enabled, allowing unauthenticated assertion parameters to be processed. During the verification process, the system issues an HTTP POST request to a user-defined OpenID provider endpoint, giving an attacker the ability to control both the destination and much of the form body. This can lead to arbitrary interactions with internal HTTP services that are accessible from the Gitea server. Notably, the server does not return the response to the attacker, categorizing this as a blind SSRF vulnerability. The actual impact is contingent on the specific internal services and network addresses that the affected server can reach, highlighting a serious risk for exposed networks.

References