REDHAT-BUG-2432216: Gitea Gitea vulnerability

Published Jan 22, 2026

Updated

Gitea does not properly validate project ownership in organization project operations. A user with project write access in one organization may be able to modify projects belonging to a different organization.

Affected Software

1 affected component

Gitea Gitea

Event History

Jan 22, 2026

Data Sourced

via Red Hat·11:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2432216?

The severity of REDHAT-BUG-2432216 is rated as 47, indicating a significant risk.

How do I fix REDHAT-BUG-2432216?

To fix REDHAT-BUG-2432216, ensure that project ownership validations are properly implemented in Gitea for organization project operations.

What can happen if REDHAT-BUG-2432216 is exploited?

If REDHAT-BUG-2432216 is exploited, malicious users may gain unauthorized access to modify projects belonging to different organizations.

Which versions of Gitea are affected by REDHAT-BUG-2432216?

REDHAT-BUG-2432216 affects specific versions of Gitea that do not implement proper project ownership validation.

How can I mitigate the risk of REDHAT-BUG-2432216?

To mitigate the risk of REDHAT-BUG-2432216, regularly review user permissions and implement strict access controls for projects.