Gitea Container Vulnerability Exposes Private Container Images to Attackers

A critical security vulnerability in Gitea’s built-in container registry exposes private container images to unauthenticated attackers, raising significant concerns for organizations that rely on self-hosted Git and CI/CD environments. The flaw, tracked as CVE-2026-27771, allows remote attackers to access and download container images marked as private without requiring authentication, tokens, or any prior access. The […] The post Gitea Container Vulnerability Exposes Private Container Images to Attackers appeared first on Cyber Security News.