CVE-2026-104626

A flaw was found in Gitea Actions. An authenticated user capable of submitting a pull request from a repository fork can exploit this vulnerability to execute untrusted workflow code on repository runners. When a workflow job awaiting approval is canceled by a subsequent run within the same...

CVE-2026-77934

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with import'subprocess' to run commands, stealing environment...

CVE-2026-77934 Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with import'subprocess' to run commands, stealing environment...

EUVD-2026-104690

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with import'subprocess' to run commands, stealing environment...

CVE-2026-77934

Coze Studio versions before 0.5.0 are affected by an insecure default configuration allowing registered users to perform Remote Code Execution (RCE) . The vulnerability exists because workflow code nodes run in an unsandboxed python3 subprocess , where attackers can bypass regex import filters us...

CVE-2026-77934 Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with import'subprocess' to run commands, stealing environment...

CVE-2026-77934 Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with import'subprocess' to run commands, stealing environment...

PT-2026-117952

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with import 'subprocess' to run commands, stealing environment...

Coze-Dev and Coze-Studio: Configuration error vulnerabilities

Versions of coze-dev and coze-studio before 0.5.0 have a configuration error vulnerability. This vulnerability stems from insecure default configurations, allowing any registered user to execute commands in unshaded Python3 subprocedures by running workflow code nodes. Attackers can bypass the...

CVE-2026-71184

Gitea's pull request review notifier does not attach the pull request to the Actions notification, so the fork workflow approval gate does not recognize the run as originating from a fork. Review comment and review approval or rejection events can consequently load workflow code from the fork hea...

CVE-2026-66877

Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and dispatch paths do not re-check the run's approval requirement. A separate run sharing a job-level concurrency group can cancel a pending job and cause its blocked sibling jobs to be re-emitted and...

EUVD-2026-101098

Gitea's pull request review notifier does not attach the pull request to the Actions notification, so the fork workflow approval gate does not recognize the run as originating from a fork. Review comment and review approval or rejection events can consequently load workflow code from the fork hea...

EUVD-2026-101089

Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and dispatch paths do not re-check the run's approval requirement. A separate run sharing a job-level concurrency group can cancel a pending job and cause its blocked sibling jobs to be re-emitted and...

FreeBSD: VID-fac18f5f-afc2-11f1-8266-3c7c3fba4204 (CVE-2026-66877): Gitea -- multiple vulnerabilities

Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and dispatch paths do not re-check the run's approval requirement. A separate run sharing a job-level concurrency group can cancel a pending job and cause its blocked sibling jobs to be re-emitted and...

PT-2026-114260

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The pull request review notifier fails to attach the pull request to the Actions notification. This causes the fork workflow approval gate to fail in recognizing that a run originates from a...

CVE-2026-71184: Incorrect Authorization

Gitea's pull request review notifier does not attach the pull request to the Actions notification, so the fork workflow approval gate does not recognize the run as originating from a fork. Review comment and review approval or rejection events can consequently load workflow code from the fork hea...

FreeBSD: VID-fac18f5f-afc2-11f1-8266-3c7c3fba4204 (CVE-2026-71184): Gitea -- multiple vulnerabilities

Gitea's pull request review notifier does not attach the pull request to the Actions notification, so the fork workflow approval gate does not recognize the run as originating from a fork. Review comment and review approval or rejection events can consequently load workflow code from the fork hea...

CVE-2026-66877: Improper Access Control

Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and dispatch paths do not re-check the run's approval requirement. A separate run sharing a job-level concurrency group can cancel a pending job and cause its blocked sibling jobs to be re-emitted and...

EUVD-2026-93919

Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull request author. For pullrequest activity triggered by a maintainer during ordinary triage, such as adding a label, the run was created without requiring approval,...

CVE-2026-94205

Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull request author. For "pullrequest" activity triggered by a maintainer during ordinary triage, such as adding a label, the run was created without requiring approval,...