CVE-2026-20706

EUVD-2026-41612
Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass token scope checks on the web archive download endpoint.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 40.11%
Common Weakness Enumeration
References
https://blog.gitea.com/release-of-1.26.2/
https://github.com/go-gitea/gitea/pull/37735
https://github.com/go-gitea/gitea/releases/tag/v1.26.2
https://github.com/go-gitea/gitea/security/advisories/GHSA-cr4g-f395-h25h
https://github.com/go-gitea/gitea/security/advisories/GHSA-cr4g-f395-h25h