CVE-2026-116474

In Gitea , a vulnerability exists where the GITEA_TOKEN used in Gitea Actions jobs authenticates as the gitea-actions system user. Because the /api/v1/user email and GPG key endpoints accepted this user, a job could register an email address and a GPG key without required confirmation. Consequent...

CVE-2026-118386

In Gitea , a logic flaw in review-triggered workflows allows an attacker with read access to execute unauthorized code. The system fails to verify that the commit referenced in a review's commit_id belongs to the reviewed pull request. By submitting a review that points to a malicious commit (via...