CVE-2026-24690

Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches...

CVE-2026-24690

Gitea versions prior to 1.25.5 are vulnerable to an Access Control Bypass due to insufficient permission checks during the process for updating or rebasing pull request branches. An attacker can exploit this weakness to gain unauthorized access to or modify protected branches . Remediation involv...