securityweek.com·May 28, 2026
A vulnerability in the open-source Git service Gitea, tracked as CVE-2026-27771, allowed unauthenticated attackers to access private container images from over 30,000 deployments due to improper access control in its container registry. Organizations are urged to update to version 1.26.2 to mitigate this risk.
The key insight for you is to ensure immediate remediation by updating to Gitea version 1.26.2 to patch the critical CVE-2026-27771 vulnerability. This flaw allowed unauthenticated access to private container images on over 30,000 deployments, posing a significant risk of exposing sensitive data. Ensure authentication is enforced for content access, but weigh the implications if some containers are meant to be public.