01 Record

CVE-2026-24059

Gitea runner registration-token GET endpoint performs a write under a read-only token scope

UnratedPUBLISHEDCNA: Gitea

Base scoreUnratedNo CVSS vector published

02 Description

Gitea runner registration-token GET endpoint performs a write under a read-only token scope

Published: 2026-08-13 16:48Z1 DAY AGO
Last updated: 2026-08-13 16:48Z1 DAY AGO
Reserved: 2026-03-03
Assigning CNA: Gitea
Record state: PUBLISHED
Severity: Unrated — no CVSS score published
CVSS vector: Not published
Weaknesses: CWE-269
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 45fda1fc0dd831d9966946674d9e3540db5c17452ab1344ac0a5671584514baa

VendorProductVersionsPlatforms