CVE-2026-27775 — Gitea pre-receive hook permission cache allows full repository write access
Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for …
Published: 2026-07-03 · CVSS: 8.8 · CVSS 3.1
Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7