CVE-2026-110494

Received Received - Intake

Release Attachment Linkage Vulnerability in GitHub

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: Gitea Limited

Description

Adding attachments to a release checked the repository and release of an attachment but not whether it was already linked to an issue or comment. A user with write access to the releases of a repository, who knew the UUID of an attachment in that repository, could link it to a release. This exposed the file name, size and download count of the attachment through the release and allowed the user to rename or delete it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-18

Last Modified

2026-10-18

Generated

2026-10-19

AI Q&A

2026-10-19

EPSS Evaluated

N/A

NVD

CVE-2026-110494

Affected Vendors & Products

Vendor	Product	Version / Range
Gitea	Gitea	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability allows a user with write access to a repository's releases to link an existing attachment to a release by knowing its UUID. The system did not verify if the attachment was already linked to an issue or comment, exposing file details like name, size, and download count. The attacker could also rename or delete the attachment.

Detection Guidance

This vulnerability requires checking if attachments linked to releases are improperly exposed or modified without proper access controls. Review Gitea release logs for unauthorized attachment renames or deletions. Check for attachments with mismatched repository or release associations.

Impact Analysis

If you use Gitea and have write access to repositories, an attacker with access could manipulate attachments linked to releases. This could expose sensitive file information, alter file names, or delete files, potentially disrupting workflows or leaking data.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, violating GDPR (data protection) or HIPAA (health information privacy) by exposing or altering protected files. Compliance may be compromised if such incidents occur.

Mitigation Strategies

Update Gitea to the latest version to address the attachment linking issue. Review repository releases and attachments for unauthorized changes or access. Restrict write access to releases to trusted users only.

Hi! I’m here to help you understand CVE-2026-110494. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70