Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The collaborator can promote their effective permissions from Admin to Owner and then perform owner-only operations, including transferring the repository to their own account. This bypasses the intended boundary between repository administration and ownership.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 14 Oct 2026 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The collaborator can promote their effective permissions from Admin to Owner and then perform owner-only operations, including transferring the repository to their own account. This bypasses the intended boundary between repository administration and ownership. | |
| Title | Gitea repository ownership escalation by administrators | |
| Weaknesses | CWE-266 | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Gitea
Published:
Updated: 2026-10-14T14:38:05.476Z
Reserved: 2026-08-13T16:50:59.736Z
Link: CVE-2026-73814
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2026-10-14T15:17:24.910
Modified: 2026-10-14T16:04:39.483
Link: CVE-2026-73814
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses