CVE-2026-112887

In Gitea , Actions task tokens authenticate to the REST API as a shared system user with a negative ID . Because these tokens lack sufficient API scopes and filters are treated as having no owner restrictions, a user capable of running a workflow can use a job's token to perform a GET /api/v1/use...