CVE-2026-58433: Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting

Published Aug 13, 2026

Updated

Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting

Event History

Aug 13, 2026

CVE Published

via MITRE·04:44 PM

Data Sourced

via MITRE·04:44 PM

DescriptionWeakness

CVE-2026-58433 has a risk rating of 41.

CVE-2026-58433 allows bypassing the RepoAdminChangeTeamAccess organization setting during team-repository linking.

To resolve CVE-2026-58433, upgrade to Gitea version 1.27.0 or later.

CVE-2026-58433 could lead to unauthorized access to repositories by teams without the necessary permissions.

CVE-2026-58433 was published on August 13, 2026.