Paper/Archive/CVE-2026-20706

CVE-2026-20706

Gitea Gitea Open Source Git Server — Gitea repository archive downloads bypass token scope checks

EPSS 0.6%public exploit CVSS 9.1

critical.is priorityof 100

47

CVSS 9.1 (ADP)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 48.2.482 × 209.6 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass token scope checks on the web archive download endpoint.

Affected

ProductAffectedFixed inSource

Gitea Open Source Git Server≤ 1.26.1–CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

exploitgithub.com/go-gitea/gitea/security/advisories/GHSA-cr4g-f395-h25h patchgithub.com/go-gitea/gitea/pull/37735 refgithub.com/go-gitea/gitea/releases/tag/v1.26.2 refblog.gitea.com/release-of-1.26.2