Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CVE-2026-58053: Gitea act_runner Docker Escalation with Privileged: False
CVE-2026-58053
Summary
Gitea's Docker workflow feature allows users to run jobs with elevated privileges, even when 'privileged' mode is disabled. This means a malicious user can potentially escape the job container and gain control of the host system. To mitigate this, update Gitea to a version that addresses this issue or configure Docker runners with 'privileged' mode enabled.
Original title
Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, for...
Original description
Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-opt unchanged. A user who can run a workflow on a Docker-backed runner can create a job container with host namespaces and broad capabilities and escape to the host as root despite privileged mode being disabled.
nvd CVSS3.1
9.9
nvd CVSS4.0
9.4
Vulnerability type
CWE-269
Improper Privilege Management
Published: 28 Jun 2026 · Updated: 23 Jul 2026 · First seen: 28 Jun 2026