CVE-2026-27775

Name of the Vulnerable Software and Affected Versions Gitea version 1.25.5

Description The software caches a branch-specific write-permission result across multiple refs during a single pre-receive hook session. This behavior allows a user with a per-branch maintainer-edit grant to reuse that permission for other refs, leading to an escalation of privileges to full repository write access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.