CVE-2026-26231 Gitea maintainer-edit permissions allow unauthorized commits to readable repositories

Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to repositories that the user can read but should not be able to write...

CVE-2026-26231

creationtimestamp| type| source ---|---|--- 2026-06-05 22:22:34+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-mm7c-rhg6-qr4r 2026-07-05 20:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpweisht6r2g...