{"id":"CVE-2026-73802","kind":"vulnerability","aliases":["CVE-2026-73802","GHSA-x4q3-gcj3-m6cf","GO-2026-6656"],"related":[],"title":"gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled in gitea.com/gitea/runner","description":"Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host namespace settings, expanded capabilities, and security profile overrides can remain effective despite Privileged being forced false. A workflow author able to run jobs on an affected Docker-backed runner can use these options to access host namespaces and execute commands as root on the runner host, bypassing the intended container isolation.","summary":"Gitea Runner passes workflow-defined container options into Docker job containers even when privileged mode is disabled, so host namespaces, extra capabilities, and security profile overrides still apply. A workflow author on an affected Docker-backed runner can use these options to get root command execution on the runner host.","severity":"high","cvss":8.8,"epss":0.00472,"exploited":false,"exploited_at":null,"products":[{"name":"gitea.com/gitea/runner","fixed":["1.0.9-0.20260731160927-34bfa1915022"],"affected":"< 1.0.9-0.20260731160927-34bfa1915022","ecosystem":"go"}],"ecosystems":["go"],"tags":["docker","gitea-runner","package","self-hosted"],"not_affected_if":["non-docker-backend","runner-version-at-or-above-fix"],"how_to_check":"Check the gitea.com/gitea/runner version in use and compare it to the fixed pseudo-version 1.0.9-0.20260731160927-34bfa1915022; anything older is affected.","fix":"Upgrade gitea.com/gitea/runner to 1.0.9-0.20260731160927-34bfa1915022 or later.","status":"open","published_at":"2026-10-07T14:10:14+00:00","first_seen_at":"2026-10-23T19:13:08+00:00","triaged_at":"2026-10-23T19:51:31+00:00","updated_at":"2026-10-23T19:51:31+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-10-23T19:51:31Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade gitea.com/gitea/runner to 1.0.9-0.20260731160927-34bfa1915022 or later.\nunknown","summary":"Gitea Runner passes workflow-defined container options into Docker job containers even when privileged mode is disabled, so host namespaces, extra capabilities, and security profile overrides still apply. A workflow author on an affected Docker-backed runner can use these options to get root command execution on the runner host.","category":"package","who_cares":["gitea-runner","docker","self-hosted"],"confidence":0.8,"analyst_note":"","how_to_check":"Check the gitea.com/gitea/runner version in use and compare it to the fixed pseudo-version 1.0.9-0.20260731160927-34bfa1915022; anything older is affected.\nunknown","needs_analyst":false,"not_affected_if":["non-docker-backend","runner-version-at-or-above-fix"],"severity_if_unknown":"high"},"cost_usd":0.000538,"input_tokens":2228,"output_tokens":630,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':25A,33A,36A '-6656':34A '-73802':26A,37A '/gitea/runner':23A,40A 'abl':139C 'access':155C 'affect':83B,145C 'appli':77B 'author':80B,138C 'back':86B,148C 'bypass':167C 'capabl':10A,71B,123C 'command':95B,160C 'configur':113C 'contain':14A,55B,60B,107C,112C,170C 'container.options':5A 'control':106C 'cve':24A,35A 'defin':54B 'despit':131C 'disabl':19A,66B,118C 'docker':41B,58B,85B,110C,147C 'docker-back':84B,146C 'effect':130C 'even':61B 'execut':96B,159C 'expand':122C 'extra':70B 'fals':135C 'flag':11A 'forc':134C 'gcj3':30A 'get':93B 'ghsa':28A 'ghsa-x4q3-gcj3-m6cf':27A 'gitea':2A,43B,49B,101C 'gitea-runn':1A,42B 'gitea.com':22A,39A 'gitea.com/gitea/runner':21A,38A 'go':32A 'host':7A,48B,68B,100B,119C,156C,166C 'intend':169C 'isol':171C 'job':13A,59B,111C,142C 'm6cf':31A 'mode':17A,64B,116C 'namespac':8A,69B,120C,157C 'option':56B,91B,108C,153C 'overrid':75B,127C 'packag':45B 'pass':6A,51B,103C 'privileg':16A,63B,115C,132C 'profil':74B,126C 'remain':129C 'root':94B,162C 'run':141C 'runner':3A,44B,50B,87B,99B,102C,149C,165C 'secur':73B,125C 'self':47B 'self-host':46B 'set':121C 'still':76B 'use':89B,151C 'workflow':4A,53B,79B,105C,137C 'workflow-control':104C 'workflow-defin':52B 'x4q3':29A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-07T14:10:14+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"govuln","external_id":"GO-2026-6656","url":"https://pkg.go.dev/vuln/GO-2026-6656","severity":null,"published_at":"2026-10-07T14:10:14+00:00","modified_at":"2026-10-07T14:10:14+00:00","first_seen_at":"2026-10-23T19:13:08+00:00","fetched_at":"2026-10-23T19:13:08+00:00","note":null},{"source":"epss","external_id":"CVE-2026-73802","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-73802","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:43+00:00","fetched_at":"2026-10-23T19:13:43+00:00","note":null},{"source":"nvd","external_id":"CVE-2026-73802","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73802","severity":null,"published_at":"2026-10-14T15:17:24+00:00","modified_at":"2026-10-18T14:16:55+00:00","first_seen_at":"2026-10-23T19:35:23+00:00","fetched_at":"2026-10-23T19:35:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}