CVE-2026-73814 — Gitea repository ownership escalation by administrators
Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The collaborator can promote their effe…
Published: 2026-10-14 · CVSS: 6.5 · CVSS 3.1
Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The collaborator can promote their effective permissions from Admin to Owner and then perform owner-only operations, including transferring the repository to their own account. This bypasses the intended boundary between repository administration and ownership.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7