{"id":"CVE-2026-94205","published":"2026-10-06T20:17:34.733","lastModified":"2026-10-07T21:17:21.950","description":"Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull request author. For `pull_request` activity triggered by a maintainer during ordinary triage, such as adding a label, the run was created without requiring approval, while the workflow definition was still taken from the fork head. Where Actions is enabled and a matching runner is registered, fork-controlled workflow code could run on the base repository's runners without an explicit approval.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-441","CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://blog.gitea.com/release-of-28.0.0/","tags":[]},{"url":"https://github.com/go-gitea/gitea/pull/39399","tags":[]},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.0.0","tags":[]},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-xh39-mxw9-34pp","tags":[]}],"exploitRefs":[{"url":"https://github.com/go-gitea/gitea/pull/39399","tags":[]},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.0.0","tags":[]},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-xh39-mxw9-34pp","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows for unauthorized execution of workflows in the base repository through fork pull requests, bypassing approval requirements.","exploitability":"Exploitation is relatively straightforward for maintainers who can trigger `pull_request` events without needing explicit approval.","blast_radius":"If exploited, this could lead to unauthorized execution of arbitrary code on the base repository's runners, potentially compromising the integrity and security of the repository.","remediation":"Disable the `pull_request` event handling for workflows in Gitea or upgrade to the latest version that addresses this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","rce","git","vcs"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:40:40.051Z"}}