CVE-2026-73814

CVE-2026-73814 · Gitea repository ownership escalation by administrators

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The collaborator can promote their effective permissions from Admin to Owner and then perform owner-only operations, including transferring the repository to their own account. This bypasses the intended boundary between repository administration and ownership.

CVSS 6.5 · Средний · EPSS 0,5%

Опубликовано

2026-10-14T14:38:05.476Z

Обновлено

2026-10-18T13:41:38.796Z

Проверьте свой сервер →