Description
Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration
Published: 2026-08-13
Score: 8.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

When Gitea attempts to migrate a repository, it first validates the source URL but then follows any HTTP redirects to the target host. If an attacker can cause the migration to point to a URL that redirects to an external endpoint, the server will download the repository contents and send them to that external host, thereby leaking confidential data. This weakness is classified as an HTTP response redirection flaw (CWE‑918).

Affected Systems

The issue exists in the Gitea Open Source Git Server; no specific product versions are listed, so all installations of the software that support the migration feature could be affected.

Risk and Exploitability

The EPSS score is <1%, indicating a low probability of exploitation, and the vulnerability is not in CISA’s KEV catalog. The flaw is exploitable by initiating a migration with a crafted URL, which generally requires the attacker to have migration privileges or be able to operate on the internal network. The CVSS base score of 8.5 reflects a high impact on confidentiality and a high overall severity.

Generated by OpenCVE AI on August 14, 2026 at 20:43 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Check the Gitea security advisory and upgrade to a release that removes the unsafe redirect behavior as soon as one is available.
  • Restrict the repository migration feature to trusted users only or disable it when migrations are not required.
  • Implement network controls to block or monitor outbound HTTP traffic from the Gitea server to untrusted external hosts during migration operations.

Generated by OpenCVE AI on August 14, 2026 at 20:43 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-82f7-87hm-852x Gitea: Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration
History

Fri, 14 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N'}

Thu, 13 Aug 2026 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Gitea
Gitea gitea Open Source Git Server
Vendors & Products Gitea
Gitea gitea Open Source Git Server

Thu, 13 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Description Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration
Title Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration
Weaknesses CWE-918
References

Subscriptions

Gitea Gitea Open Source Git Server
cve-icon MITRE

Status: PUBLISHED

Assigner: Gitea

Published:

Updated: 2026-08-14T17:36:49.613Z

Reserved: 2026-07-08T09:19:07.148Z

Link: CVE-2026-57894

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-08-13T17:17:25.970

Modified: 2026-08-26T16:53:48.300

Link: CVE-2026-57894

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-14T20:45:03Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)