CVE-2026-73126

Gitea's Actions workflow status badge endpoint does not enforce repository-read scope or the public-only restriction on the token authenticating the request. A token lacking read:repository, or restricted to public repositories, can retrieve the latest workflow status of a private repository accessible to its owner. This discloses private workflow status beyond the token's intended delegated permissions.

• CWE-863

• https://blog.gitea.com/release-of-1.27.3/
• https://github.com/go-gitea/gitea/pull/39044
• https://github.com/go-gitea/gitea/pull/39058
• https://github.com/go-gitea/gitea/releases/tag/v1.27.3
• https://github.com/go-gitea/gitea/security/advisories/GHSA-r96c-jc75-rxv6

Published

Oct 14, 2026

Last Modified

Oct 14, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-73112Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-73116Insufficiently Protected Credentials vulnerability in Apache…10
• CVE-2026-73117Improper Neutralization of CRLF Sequences in HTTP Headers ('…10
• CVE-2026-7312CWE‑522: Insufficiently Protected Credentials in web service…7.5
• CVE-2026-73122A flaw was found in the multicloud-operators-channel compone…7.7
• CVE-2026-73125Ebyte device web management interface does not consistently …9.8
• CVE-2026-7313CWE‑522: Insufficiently Protected Credentials in web service…4.9
• CVE-2026-73130Gitea does not limit the length of the gitignores field acce…4.3
• CVE-2026-73135Gitea uses inconsistent repository visibility predicates, an…5.3
• CVE-2026-73136Authentication Bypass by Capture-replay in ZenHive mpp allow…7.5
• CVE-2026-73137A flaw was found in the multicloud-operators-subscription co…7.7
• CVE-2026-7314A vulnerability was detected in eiceblue spire-doc-mcp-serve…7.3