SB2026081542 - Improper privilege management in Gitea Runner

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026081542

SB2026081542 - Improper privilege management in Gitea Runner

Published: August 15, 2026

Security Bulletin ID SB2026081542
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper privilege management (CVE-ID: CVE-2026-73802)

CWE-ID: CWE-269 - Improper Privilege Management

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to execute arbitrary commands as root on the runner host.

The vulnerability exists due to improper privilege management in gitea-runner job container HostConfig handling when processing workflow-controlled container.options. A remote user can submit a specially crafted workflow with container options that preserve host namespace, capability, and security profile flags to execute arbitrary commands as root on the runner host.

Exploitation requires the ability to submit a workflow to a repository using a Docker-backed shared runner.


Remediation

Install update from vendor's website.

References