01 Record

CVE-2026-58444

Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents

UnratedPUBLISHEDCNA: Gitea

Base scoreUnratedNo CVSS vector published

02 Description

Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents

Published: 2026-08-13 16:44Z1 DAY AGO
Last updated: 2026-08-13 16:44Z1 DAY AGO
Reserved: 2026-06-30
Assigning CNA: Gitea
Record state: PUBLISHED
Severity: Unrated — no CVSS score published
CVSS vector: Not published
Weaknesses: CWE-863
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 76780362b979dc89b76cef5c0380e6954deb74464fc5e23a45a63c9cce1ffd85

VendorProductVersionsPlatforms