EUVD-2026-101096Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessNetwork access to Gitea instance
-
ExploitTrigger unspecified vulnerability
-
ImpactUnknown impact
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization logic validation
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation conditions cannot be determined from available data. No CVSS vector, CWE, or description is present to indicate whether authentication is required, whether specific Gitea features must be enabled, or whether the attack is local or remote. Authentication requirements not confirmed from available data. |
| Impact | Risk cannot be meaningfully assessed from this record. No CVSS base score, vector, CWE, or vulnerability description is present - every standard signal (attack vector, complexity, privilege requirements, impact to CIA triad) is absent. EPSS probability, KEV status, and POC availability are all unknown. The sole actionable data point is that Alpine Linux issued a fixed package at 1.27.3-r0. Without knowing whether this is a remote code execution, authentication bypass, or information disclosure, an operator cannot make a priority decision. The absence of CVSS and CWE here is a meaningful gap, not a minor omission - no public exploit identified at time of analysis. |
| Exploit ScenarioDerived | The vulnerability type is unknown, so no grounded exploit scenario can be constructed. If the flaw is in Gitea's web interface or API (common attack surfaces for self-hosted Git services), an attacker with network access to the Gitea instance could potentially trigger it. No POC or KEV data is available to inform a more specific scenario. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 06, 2026
Gitea packages on Alpine Linux received a security fix in version 1.27.3-r0, addressing an unspecified vulnerability. The upstream CVE record provides no description, CVSS score, CWE classification, or technical detail about the nature or impact of the flaw. Security teams relying on this record cannot assess exploitability or impact from available data alone and should consult Gitea upstream release notes and the Alpine Linux changelog for 1.27.3-r0 directly.
RemediationAI
Upgrade the Alpine Linux gitea package to version 1.27.3-r0 or later using the standard apk upgrade mechanism. No vendor advisory URL, upstream GitHub release, or changelog link is provided in this record; administrators should review the Gitea 1.27.3 release notes at the project's official repository and the Alpine Linux aports commit history for the gitea package to understand the specific fix applied. No workarounds can be recommended without knowledge of the vulnerability class.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Gitea is a self-hosted Git service written in Go, providing repository hosting, issue tracking, CI/CD integration, and web UI. The fix is packaged as gitea 1.27.3-r0 in the Alpine Linux package ecosystem. No CWE classification or affected component within Gitea is identified in this record, making root-cause classification impossible from available data. CPE strings for the affected versions are not provided.
Know when Gitea gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary rating from Vendor (vendor:alpine) · only source for this CVE.
CVSS VectorVendor: vendor:alpine
DescriptionCVE.org
Alpine Linux: gitea fixed in 1.27.3-r0
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Remote code execution in Gitea (self-hosted Git service) via a code-injection flaw (CWE-94) allows attackers to run arbi
Broken access control in Gitea's Composer package registry (versions up to and including 1.26.1) lets remote attackers r
Gitea before 1.16.7 does not escape git fetch remote. Rated high severity (CVSS 7.5), this vulnerability is remotely exp
The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer envir
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea
Authenticated command injection in Dokploy (self-hostable PaaS) versions 0.29.3 through 0.29.12 lets a low-privileged us
Reverse-proxy authentication bypass in the official Gitea Docker image (versions up to and including 1.26.2) allows any
Path traversal in Gitea's Org-mode (`.org`) markup renderer allows an attacker who can get Org-mode content rendered by
Container escape in Gitea act_runner (Docker backend, through act 0.262.0) lets an authenticated user with workflow-exec
models/repo_mirror.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 mishandles mirror repo URL settings, leading to rem
Server-side request forgery and internal repository exfiltration in Gitea before 1.27.0 lets a low-privileged authentica
Authorization bypass in Gitea versions 1.22.3 through 1.26.1 allows holders of `public-only` access tokens or OAuth gran
Exploit-DB