CVE-2026-70402

Gitea creates server-side Git hook directories and scripts with mode "0777", relying on the process umask to reduce it. Under a permissive umask for example "0000" or "0002" the resulting files or directories are group- or world-writable. On a deployment where another local principal can reach th...