CVE-2026-58424
Received Received - Intake

Permanent Fork PR Workflow Approval Gate Bypass

Publication date: 2026-07-03

Last updated on: 2026-07-03

Assigner: Gitea Limited

Description
Permanent Fork PR Workflow Approval Gate Bypass

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-03
Last Modified
2026-07-03
Generated
2026-07-04
AI Q&A
2026-07-04
EPSS Evaluated
N/A
NVD
CVE-2026-58424

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
CWE-285 The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Permanent Fork PR Workflow Approval Gate Bypass. It means that the security mechanism designed to require approval for pull requests in a forked repository can be bypassed permanently.

Impact Analysis

The vulnerability can have a significant impact as it allows an attacker with limited privileges to bypass the approval gate for pull requests, potentially leading to unauthorized code changes being merged. This can compromise confidentiality, integrity, and availability of the affected system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58424. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart