CVE-2026-117685 Gitea public-only package token access to private OCI blobs
CriticalCVSS 9.1
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The OCI registry's cross-repository blob mount checked the target package against the token's public-only restriction, but checked the source blob only against the full account permissions of the token owner. A public-only token with write:package scope, whose owner can read a private package and write to a public package namespace, could mount a blob of the private package into the public package. The private blob, such as a container layer, could then be downloaded by anyone through the public package.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Gitea | < 28.3.0 | 28.3.0 |
References
- GitHub Security Advisory GHSA-8g99-g36h-5p2w vendor-advisory
- Fix: go-gitea/gitea pull request #39690 patch
- Fix backport to release/v28: go-gitea/gitea pull request #39853 patch
- Gitea 28.3.0 release announcement release-notes
- go-gitea/gitea v28.3.0 release release-notes