---
id: "CVE-2026-119625"
kind: "vulnerability"
aliases: ["CVE-2026-119625"]
title: "Personal access tokens bypass scope checks on the user profile route"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["other", "personal-access-tokens", "self-hosted"]
not_affected_if: ["no-personal-access-tokens"]
published_at: "2026-11-01T10:18:36+00:00"
first_seen_at: "2026-11-01T10:49:34+00:00"
updated_at: "2026-11-01T10:51:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119625", "first_seen_at": "2026-11-01T10:49:34+00:00"}]
---

# Personal access tokens bypass scope checks on the user profile route

A personal access token with a narrow scope, such as read:issue, can be used over HTTP Basic auth on the /{username} route to read the owner's private activity and feeds. A public-only token can list private repositories and organizations, and an administrator's token exposes every account.

_Summary, check and fix written by a model from the sources; labelled as such._

## Fix

Move to a release that restricts tokens on this route to feeds (read:user or read:organization); the sources do not name a fixed version.

## Timeline

- 2026-11-01T10:49:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119625

## From the sources

The `/{username}` web route accepted personal access tokens over HTTP Basic authentication without checking their scope. A token confined to an unrelated scope, such as `read:issue`, could read its owner's private activity through the user RSS/Atom feed and the profile activity tab, and other members' activity in a private organization through the organization feed; a public-only token could list the owner's private repositories and organizations and render private profile READMEs. For a site administrator's token this applied to every account. Tokens are now accepted on this route only for feeds, which require `read:user` or `read:organization`.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_