CVE-2026-118386

Workflows triggered by a pull request review were read from the commit named in the review's `commit_id`, while the fork restrictions were decided by the reviewed pull request, and the commit was not checked to belong to that pull request. A user with read access to a repository could place a commit of their own in it, through a fork pull request or an AGit push, and submit a review naming that commit on a pull request whose head branch is in the same repository. On instances with a runner serving the repository, the attacker's workflow then ran without approval, received the Actions secrets of the repository and its owner, and got a `GITEA_TOKEN` with write access to the repository. Review-triggered workflows now run on the pull request head.

• CWE-863

• https://blog.gitea.com/release-of-28.3.0/
• https://github.com/go-gitea/gitea/pull/40099
• https://github.com/go-gitea/gitea/pull/40117
• https://github.com/go-gitea/gitea/releases/tag/v28.3.0
• https://github.com/go-gitea/gitea/security/advisories/GHSA-32h8-5xqg-h466

Published

Nov 1, 2026

Last Modified

Nov 1, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-118375llama.cpp b8841 before b11865 contains an out-of-bounds writ…8.1
• CVE-2026-118376WeKnora before 0.8.2 contains a server-side request forgery …5.3
• CVE-2026-118377mews/pos through 2.0.0 contains an insufficient verification…7.5
• CVE-2026-118378Tabularis before 0.28.0 contains an SQL injection vulnerabil…7.8
• CVE-2026-11838Missing authentication for critical function vulnerability i…4.3
• CVE-2026-118384GNU mtools before 4.0.50 has an out-of-bounds write in parse…6.1
• CVE-2026-11839Unrestricted upload of file with dangerous type vulnerabilit…9.9
• CVE-2026-118391Allocation of Resources Without Limits or Throttling vulnera…8.9
• CVE-2026-118394The OAuth2 userinfo endpoint (`/login/oauth/userinfo`) decid…
• CVE-2026-118395Gitea 1.27.3 stopped personal access tokens restricted to pu…
• CVE-2026-1184GitLab has remediated an issue in GitLab EE affecting all ve…7.5
• CVE-2026-11840Zohocorp ManageEngine Password Manager Pro versions before 1…8.8