Auth bypass in Gitea Open Source Git Server

CVE-2026-58434

Private Repository Metadata Remains Accessible After Access Revocation

Vulnerability class: Information Disclosure

Affected products

Weakness classification (CWE)

References