CVE-2026-71301

Gitea's repository markup endpoint resolves same-repository pull request references without enforcing the viewer's Pull Requests permission. A member with only Wiki access to a private repository can submit a markup preview request and retrieve a private pull request's title and state icon despite lacking Issues and Pull Requests access. This exposes pull request metadata across repository unit permissions.

• CWE-284

• https://blog.gitea.com/release-of-1.27.3/
• https://github.com/go-gitea/gitea/pull/39045
• https://github.com/go-gitea/gitea/pull/39054
• https://github.com/go-gitea/gitea/releases/tag/v1.27.3
• https://github.com/go-gitea/gitea/security/advisories/GHSA-5w72-2mqm-qh46

Published

Oct 14, 2026

Last Modified

Oct 14, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-71294Cotonti CMS's Comments plugin deserializes user-supplied dat…7.6
• CVE-2026-71297A flaw was found in the maestro gRPC broker. This vulnerabil…5.4
• CVE-2026-71298A flaw was found in maestro. A remote attacker could exploit…6.4
• CVE-2026-71299A flaw was found in Maestro. Its REST API write endpoints we…6.5
• CVE-2026-7130A flaw has been found in SourceCodester Pharmacy Sales and I…7.3
• CVE-2026-71300Improper input validation vulnerability in Apache Camel Atmo…9.8
• CVE-2026-71302The application accepts user-supplied session identifiers an…7.1
• CVE-2026-71303Lemur manages TLS certificate creation. Prior to 1.9.3, _val…7.7
• CVE-2026-71307Lemur manages TLS certificate creation. Prior to 1.9.3, GET …7.7
• CVE-2026-71308Lemur manages TLS certificate creation. From 0.5.0 until 1.9…8.1
• CVE-2026-71309rclone is a command-line program to sync files and directori…8.6
• CVE-2026-7131A vulnerability has been found in code-projects Online Lot R…7.3