CVE-2026-52804CWE-193

Gogs: Privilege Escalation via Collaboration Access Mode Validation

Medium · published June 24, 2026

CVSS v4.0
5.5
EPSS
0%
Percentile
41.9
In the wild
Unconfirmed
What it is

Gogs is an open source self-hosted Git service. Prior to 0.14.3, a repository admin collaborator can escalate their privileges to owner-level access by exploiting an off-by-one error in the ChangeCollaborationAccessMode function. This vulnerability is fixed in 0.14.3.

The record
Technical detail
CVSS v4.0
5.5 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00499 · 41.9th percentile
Weakness
CWE-193 · Off-by-one Error
Published
2026-06-24T20:20Z
EPSS history
Timeline
  • 24 JUN 20:20Z
    Gogs: Privilege Escalation via Collaboration Access Mode Validation
    cvelistv5