CVE-2026-58435

MediumCVSS 5.4

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

A vulnerability in Gitea LFS allows privilege escalation via deploy keys. A person with a deploy key can gain higher privileges than intended.

An attacker with access to a deploy key can gain unauthorized access to LFS resources, potentially leading to confidentiality and integrity breaches.

Update Gitea to a patched version and review deploy key configurations to ensure they have minimal required permissions. Consider key rotation.

Original NVD description (English source)

Gitea LFS Deploy-Key Privilege Escalation