CVE-2026-58435EUVD-2026-5816213.08.2026, 17:17Gitea LFS Deploy-Key Privilege EscalationEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTPrimary5.4 MEDIUMNETWORKLOWLOWCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:NAwaiting analysisThis vulnerability is currently awaiting analysis.Base ScoreCVSS 3.xEPSS ScorePercentile: 19.77%Common Weakness EnumerationCWE-266 - Incorrect Privilege AssignmentA product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.Referenceshttps://blog.gitea.com/gitea-1.27.0-is-released/https://github.com/go-gitea/gitea/releases/tag/v1.27.0https://github.com/go-gitea/gitea/security/advisories/GHSA-rh79-75qm-gwjrhttps://github.com/go-gitea/gitea/security/advisories/GHSA-rh79-75qm-gwjr