ID:12788 - Exploit for Improper Verification of Cryptographic Signature in Gitea - CVE-2026-58426

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due a cross-task and cross-repository authorization bypass in Actions artifact handling. A remote user can read/write artifacts on the system.

Remediation