high7.5
CVE-2026-24690
Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches.
Impact
Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | code.gitea.io/gitea | < 1.25.5 | 1.25.5 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-47rq-xp99-92mx
- https://nvd.nist.gov/vuln/detail/CVE-2026-24690
- https://github.com/go-gitea/gitea/pull/36465
- https://github.com/go-gitea/gitea/pull/36838
- https://blog.gitea.com/release-of-1.25.5
- https://github.com/go-gitea/gitea/releases/tag/v1.25.5
- https://github.com/go-gitea/gitea/commit/76c539cd572f1638c5a8a6571b0c347b277bf999
- https://github.com/go-gitea/gitea/commit/99b0bf7324dec2f9b85ce33ff809d0cc2acd5864
- https://blog.gitea.com/release-of-1.25.5/