CVE-2026-70402

Name of the Vulnerable Software and Affected Versions Gitea (affected versions not specified)

Description Gitea creates server-side Git hook directories and scripts with mode 0777, relying on the process umask to restrict access. If a permissive umask, such as 0000 or 0002, is used, a local user with access to the repository storage can modify a hook or add an executable file to a writable hook directory. Subsequently, a Git operation may execute that file using the Gitea service account privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.