CVE-2026-117685
Deferred Deferred - Pending Action

OCI Registry Cross-Repository Blob Mount Privilege Escalation

Publication date: 2026-11-01

Last updated on: 2026-11-01

Assigner: Gitea Limited

Description
The OCI registry's cross-repository blob mount checked the target package against the token's `public-only` restriction, but checked the source blob only against the full account permissions of the token owner. A `public-only` token with `write:package` scope, whose owner can read a private package and write to a public package namespace, could mount a blob of the private package into the public package. The private blob, such as a container layer, could then be downloaded by anyone through the public package.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-01
Last Modified
2026-11-01
Generated
2026-11-01
AI Q&A
2026-11-01
EPSS Evaluated
N/A
NVD
CVE-2026-117685

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Gitea Gitea 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authorization issue in Gitea's OCI registry where a public-only token with write:package scope can access private OCI blobs. The flaw occurs during cross-repository blob mounting when Gitea checks permissions for the target package but fails to apply the same restrictions to the source blob. This allows mounting private blobs into public packages, exposing private container layers.

Detection Guidance

To detect this vulnerability, check Gitea versions for 28.2.0 or earlier. Inspect OCI registry logs for cross-repository blob mount requests to /v2/{owner}/{image}/blobs/uploads with mount and from parameters. Verify if public-only tokens with write:package scope are used for mounting blobs from private to public packages.

Impact Analysis

An attacker could use this flaw to access private container layers or OCI artifacts stored in Gitea's registry by mounting them into a public package. This could lead to unauthorized access to sensitive data, intellectual property leaks, or compliance violations if confidential information is exposed.

Compliance Impact

This vulnerability could lead to unauthorized exposure of sensitive data, violating GDPR's data protection principles or HIPAA's confidentiality requirements. Organizations using Gitea's OCI registry may face compliance risks if private data is inadvertently made public through this flaw.

Mitigation Strategies

Upgrade Gitea to version 28.3.0 or later immediately. Review and revoke any public-only tokens with write:package scope. Audit OCI registry access logs for suspicious cross-repository blob mount activities. Restrict write access to public package namespaces.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-117685. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...