CVE-2026-58429

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...

CVE-2026-58429 Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...

CVE-2026-58429 Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...

CVE-2026-58429 Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...

CVE-2026-58429

The Git repository management system Gitea is vulnerable to an access control deficiency in its Organization and Permission Endpoints (specifically /api/v1/user/orgs and /api/v1/users/{username}/orgs/{org}/permissions). This vulnerability allows for a Personal access tokens scope bypass , which c...

CVE-2026-58429

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:05+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-fq2p-5p22-8g6j...