---
id: "CVE-2026-119546"
kind: "vulnerability"
aliases: ["CVE-2026-119546"]
title: "Forgejo: restore-repo path traversal reads files outside the dump directory"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["forgejo", "git", "package", "self-hosted"]
not_affected_if: ["no-restore-repo-use", "trusted-dumps-only"]
published_at: "2026-10-30T12:16:40+00:00"
first_seen_at: "2026-10-30T12:30:26+00:00"
updated_at: "2026-10-30T12:32:32+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119546", "first_seen_at": "2026-10-30T12:30:26+00:00"}]
---

# Forgejo: restore-repo path traversal reads files outside the dump directory

Forgejo's restore-repo command trusts ../ sequences in a dump's release.yml download or patch URLs. A crafted dump lets an attacker make a restore import files like app.ini, outside the dump directory, as release attachments.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `forgejo --version` on the server and compare it with the affected ranges: through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1.
- Check whether the team has used `restore-repo` with dump files from outside sources.

## Fix

- Forgejo through 15.0.11 is affected; the sources do not state a fixed version for each branch.
- Forgejo 16.0.0 through 16.0.7 is affected; the sources do not state a fixed version.
- Forgejo 17.0.0 through 17.0.1 is affected; the sources do not state a fixed version.

## Timeline

- 2026-10-30T12:30:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119546

## From the sources

Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path traversal vulnerability in restore-repo that allows attackers to read files outside the dump directory via crafted asset paths. Attackers can supply a dump whose release.yml DownloadURL or PatchURL contains ../ sequences, importing files like app.ini as release attachments when an administrator restores it.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_