CVE-2026-28744

Gitea Git smart HTTP bypasses repository token scopes for bearer tokens

Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with bearer tokens to bypass repository token scope checks.

Affected

Gitea · Gitea Open Source Git Server

CVSS v3.1 CNA

8.1 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0.45% chance of exploitation in the next 30 days, 38th percentile

Published

2026-07-03

Updated

2026-07-06

Proof-of-concept exploits (1)

• advisories/GHSA-cc8w-r4qh-3v65

References

• CVE Record
• NVD entry