CVE-2026-26231 — Gitea maintainer-edit permissions allow unauthorized commits to readable repositories
Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to repositories that the user can read but should not be ab…
Published: 2026-07-03 · CVSS: 8.5 · CVSS 3.1
Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to repositories that the user can read but should not be able to write.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7