CVE-2026-58429

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...

CVE-2026-58429

CVE-2026-58429 affects Gitea: Public-Only Personal Access Tokens scope bypass in Organization and Permission Endpoints. Public-PAT scope bypass indicates an access-control deficiency at the organization/permission boundary, enabling a token with restricted privileges to access operations that sho...

CVE-2026-58429 Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...

CVE-2026-58429 Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...

CVE-2026-58429

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:05+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-fq2p-5p22-8g6j...