Your Gitea Docker Runner Gives Up Root Even With Privileged Mode Off

Sun, 28 Jun 2026 15:28:45 +0200

A Docker container on a Gitea build runner can break out to root on the host, the setting built to stop that does nothing, and there is no patch yet. CVSS 9.9. A working proof of concept went public the same day the flaw was disclosed. The attacker only needs permission to run a workflow on a Docker-backed runner. The setting that fails here is privileged: false. It switches off one flag and leaves the rest of the dangerous options live. This is CVE-2026-58053.

Gitea on HackingPassion.com : root@HackingPassion.com-[~]

Your Gitea Docker Runner Gives Up Root Even With Privileged Mode Off