PT-2026-55601 · Gitea · Gitea

CVE-2026-27660

Published

2026-07-03

Updated

2026-09-10

CVSS v3.1

7.5

High

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.25.5

Description Draft release data or attachments can be accessed by users who do not possess the necessary write permissions.

Recommendations Update to version 1.25.5 or later.

Exploit

Fix

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-27660

GHSA-X92V-F5GC-R34V

GO-2026-6347

Gitea