CVE-2026-119625
Description
A flaw was found in Gitea. The user profile web route accepts personal access tokens through HTTP Basic authentication without properly verifying their assigned permission scopes. An authenticated attacker possessing a token with limited permissions can bypass intended scope restrictions to view unauthorized private data, such as private activity feeds, repositories, and organization details. If the token belongs to a site administrator, this unauthorized access can extend across all user accounts on the instance.
Statement
This vulnerability is rated as Moderate because exploitation requires valid authenticated credentials and only permits unauthorized read-only disclosure of restricted profile metadata without allowing data tampering or system compromise. Within Red Hat environments, affected components incorporate Gitea code as client-side integration libraries rather than deploying the full server application. As a result, standard Red Hat deployments are not directly exposed to this authorization bypass on the user profile endpoints.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Access Control
Technical Impact: Read Application Data; Modify Application Data; Execute Unauthorized Code or Commands; Gain Privileges or Assume Identity
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
