CVE-2026-58444

Personal access token scope enforcement bypass on the repository home page GET /owner/repo discloses private repository contents...

CVE-2026-58444 Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents

Personal access token scope enforcement bypass on the repository home page GET /owner/repo discloses private repository contents...

CVE-2026-58444

The Git repository management system Gitea is affected by a personal access token scope enforcement bypass on the repository home page (GET /{owner}/{repo}). This vulnerability is caused by a lack of access control, which could allow a malicious actor to expose protected information or private re...

CVE-2026-58444

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:56+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-cp3q-vrj2-ghhh...