Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication Bypass

The official Gitea Docker image through version 1.26.2 ships with REVERSEPROXYTRUSTEDPROXIES set to a wildcard, causing Gitea to trust reverse-proxy authentication headers X-WEBAUTH-USER from any source IP instead of restricting trust to the configured reverse proxy. When reverse-proxy...

Lab-001-Gitea-CVE-2026-20896-

Lab-001-Gitea-CVE-2026-20896-...

Exploit for CVE-2026-20896

CVE-2026-20896: Gitea Docker Image Authentication Bypass PoC...

Exploit for CVE-2026-20896

CVE-2026-20896 Gitea Docker Auth Bypass Checker Authorized re...

Exploit for CVE-2026-20896

CVE-2026-20896 Gitea's official Docker image up to and inclu...

CVE-2026-20896 Gitea Docker image trusts spoofable reverse-proxy headers by default

Gitea Docker image versions up to and including 1.26.2 use REVERSEPROXYTRUSTEDPROXIES= by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are enabled...

CVE-2026-20896

creationtimestamp| type| source ---|---|--- 2026-06-26 04:52:06+00:00| seen| https://bsky.app/profile/thecybersecguru.com/post/3mp65jcs6sh27 2026-06-30 06:11:34+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mpidt76pcsbr 2026-06-30 06:11:36+00:00| seen|...