CVE-2026-28705: Gitea repository dumps write release assets using unsafe path names
Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
giteato a version that resolves this vulnerability.Fixed in 1.25.5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28705?
The severity of CVE-2026-28705 is rated at 33, indicating a moderate risk level due to potential path traversal vulnerabilities.
How do I fix CVE-2026-28705?
To fix CVE-2026-28705, upgrade to Gitea version 1.25.5 or later, which addresses the issue with unsafe path names.
What vulnerabilities are related to CVE-2026-28705?
CVE-2026-28705 is specifically associated with path traversal vulnerabilities affecting Gitea repositories.
What versions of Gitea are affected by CVE-2026-28705?
CVE-2026-28705 affects Gitea versions prior to 1.25.5.
What should I be aware of regarding file paths in Gitea due to CVE-2026-28705?
Users should be cautious of using crafted release tags and asset names that could manipulate dump output paths, potentially leading to unauthorized access.