CVE-2026-24791

The Gitea Git repository management system is affected by an incorrect authorization vulnerability (CVE-2026-24791 ). The root cause is that public-only tokens can be used to bypass private-resource restrictions on /api/v1/user self routes. Successful exploitation allows an attacker to increase t...

CVE-2026-24791 Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes

Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...