CVE-2026-58416

CVE-2026-58416 (Gitea) describes a read-access leak in the Fork-PR Actions path: when a private repo B lists A as a collaborative owner, GetActionsUserRepoPermission on the collaborative-owner branch returns code-read permissions even if the fork PR is involved, enabling an attacker to clone a th...

CVE-2026-58416

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:49+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-fj8v-hjwv-qm88...