CVE-2026-73804

Name of the Vulnerable Software and Affected Versions Gitea (affected versions not specified)

Description A flaw allows a token with write:user scope to register an attacker-controlled SSH public key on the account of the token owner. API requests signed with the corresponding private key authenticate as that account via HTTP Signature. Because this method does not include API token scope information, route-level token scope checks are skipped, effectively converting a user-scoped token into an unscoped API authentication method while maintaining the account's standard roles and repository permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.