Threats Tagged 'cve-2026-57894'

Gitea versions prior to 1.27.0 contain a vulnerability where repository migration URLs are validated before cloning, but the Git client follows HTTP redirects without restriction. This allows a low-privileged authenticated user to bypass URL allow/block policies by submitting a public Git URL that redirects to an internal or otherwise blocked Git repository. The Git client then fetches repository data from the redirected internal endpoint, enabling exfiltration of internal Git repositories. The issue affects migration and mirror fetch operations, potentially exposing sensitive internal repositories and secrets. The vulnerability is high severity for internet-facing instances with migrations enabled and can escalate to critical if sensitive internal data is exposed. No direct unauthenticated exploitation or remote code execution is confirmed.