Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-118386— Gitea Actions fork workflow trust through pull request review commit

Quick assessment

Affected

Gitea Gitea

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

由拉取请求（Pull Request）审查触发的工作流，原本是从审查中指定的所对应的提交中读取的；然而，分支限制（fork restrictions）却是依据被审查的拉取请求本身来决定的，且并未验证该提交是否确实属于该拉取请求。拥有仓库只读权限的用户，可通过分支拉取请求或 AGit 推送，将自己创建的提交放入该仓库中，随后提交一次审查，并在审查中指定该提交，同时目标拉取请求的头部分支位于同一仓库内。在配备有为该仓库服务的 Runner 的实例上，攻击者的工作流将在未经批准的情况下执行，从而获取仓库及其所有者的 A

AI Predicted 9.8 Difficulty: Moderate Updated Nov 01, 2026

Possible ATT&CK Techniques 3 AI

T1055 · Process Injection T1078.004 · Cloud Accounts T1552.001 · Credentials In Files

Affected Version Matrix 1

Vendor	Product	Version Range	Status
Gitea	Gitea	`1.19.0< 28.3.0`	affected

Updated Nov 01, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Gitea Actions fork workflow trust through pull request review commit

Source: CVE Program / CVE List V5

Vulnerability Description

Workflows triggered by a pull request review were read from the commit named in the review's `commit_id`, while the fork restrictions were decided by the reviewed pull request, and the commit was not checked to belong to that pull request. A user with read access to a repository could place a commit of their own in it, through a fork pull request or an AGit push, and submit a review naming that commit on a pull request whose head branch is in the same repository. On instances with a runner serving the repository, the attacker's workflow then ran without approval, received the Actions secrets of the repository and its owner, and got a `GITEA_TOKEN` with write access to the repository. Review-triggered workflows now run on the pull request head.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

授权机制不正确

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Gitea	Gitea	1.19.0 ~ 28.3.0	-

II. Public POCs for CVE-2026-118386

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-118386

请登录查看更多情报信息。

Other References for CVE-2026-118386 (5)

https://github.com/go-gitea/gitea/releases/tag/v28.3.0 release-notes
https://blog.gitea.com/release-of-28.3.0/ release-notes
https://github.com/go-gitea/gitea/pull/40099 patch
https://github.com/go-gitea/gitea/security/advisories/GHSA-32h8-5xqg-h466 vendor-advisory
https://github.com/go-gitea/gitea/pull/40117 patch

https://www.cve.org/CVERecord?id=CVE-2026-118386

Same Patch Batch · Gitea · 2026-11-01 · 20 CVEs total

CVE-2026-117649		Gitea private issue disclosure through issue dependency timeline events
CVE-2026-120263		Gitea OAuth2 account auto-linking takeover through the sign-up form
CVE-2026-112887		Gitea Actions task token private repository enumeration
CVE-2026-113429		Gitea stored XSS through legacy Actions artifact Content-Encoding
CVE-2026-114199		Gitea contribution heatmap private activity disclosure to public-only tokens
CVE-2026-116289		Gitea public-only token bypass through Actions runner registration
CVE-2026-116296		Gitea archived repository release, milestone and label modification
CVE-2026-116474		Gitea Actions job token spoofing of instance-signed commits
CVE-2026-117635		Gitea admin API public-only token scope bypass
CVE-2026-117646		Gitea private repository listing to public-only tokens on profiles
CVE-2026-119627		Gitea limited-visibility profile disclosure with public-only tokens
CVE-2026-117677		Gitea Helm chart upload decompression denial of service
CVE-2026-117685		Gitea public-only package token access to private OCI blobs
CVE-2026-118394		Gitea OAuth2 userinfo private group disclosure to public-only tokens
CVE-2026-118395		Gitea public-only token bypass in repository and organization creation
CVE-2026-118504		Gitea issue changes on archived repositories through the API
CVE-2026-119441		Gitea public-only token bypass on bulk organization repository deletion
CVE-2026-119533		Gitea private pull request disclosure on project boards
CVE-2026-119625		Gitea user and organization feed token scope bypass

IV. Related Vulnerabilities

Same product: Gitea

Same vendor: Gitea

Same weakness: CWE-863