CVE-2026-129337

The Gitea platform is vulnerable to an unauthorized push because Git over HTTP lowers the required permission for pushes to read access, relying on server-side hooks for enforcement. During a migration, fork, or template generation , there is a window where the repository lacks these hooks. A use...