CVE-2026-73535

Name of the Vulnerable Software and Affected Versions Gitea (affected versions not specified)

Description The OpenID connect handler allows a user's password to be accepted without requiring enrolled TOTP (Time-based One-Time Password) or WebAuthn verification before completing the sign-in process and linking an OpenID identifier. If OpenID sign-in is enabled, an attacker possessing the victim's password can establish a session and link an identifier they control. Subsequently, the attacker can access the account using that identifier, bypassing the need for the victim's password or second-factor authentication. Furthermore, changing the account password does not remove this linked identifier.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.