---
id: "CVE-2026-73802"
kind: "vulnerability"
aliases: ["CVE-2026-73802", "GHSA-x4q3-gcj3-m6cf", "GO-2026-6656"]
title: "gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled in gitea.com/gitea/runner"
severity: "high"
cvss: 8.8
epss: 0.00472
exploited: false
status: "open"
category: "package"
products: [{"name": "gitea.com/gitea/runner", "fixed": ["1.0.9-0.20260731160927-34bfa1915022"], "affected": "< 1.0.9-0.20260731160927-34bfa1915022", "ecosystem": "go"}]
ecosystems: ["go"]
tags: ["docker", "gitea-runner", "package", "self-hosted"]
not_affected_if: ["non-docker-backend", "runner-version-at-or-above-fix"]
published_at: "2026-10-07T14:10:14+00:00"
first_seen_at: "2026-10-23T19:13:08+00:00"
updated_at: "2026-10-23T19:51:31+00:00"
sources: [{"source": "govuln", "url": "https://pkg.go.dev/vuln/GO-2026-6656", "first_seen_at": "2026-10-23T19:13:08+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-73802", "first_seen_at": "2026-10-23T19:13:43+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73802", "first_seen_at": "2026-10-23T19:35:23+00:00"}]
---

# gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled in gitea.com/gitea/runner

Gitea Runner passes workflow-defined container options into Docker job containers even when privileged mode is disabled, so host namespaces, extra capabilities, and security profile overrides still apply. A workflow author on an affected Docker-backed runner can use these options to get root command execution on the runner host.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- go:gitea.com/gitea/runner affected < 1.0.9-0.20260731160927-34bfa1915022 fixed 1.0.9-0.20260731160927-34bfa1915022

## How to check

Check the gitea.com/gitea/runner version in use and compare it to the fixed pseudo-version 1.0.9-0.20260731160927-34bfa1915022; anything older is affected.

## Fix

Upgrade gitea.com/gitea/runner to 1.0.9-0.20260731160927-34bfa1915022 or later.

## Timeline

- 2026-10-23T19:13:08+00:00 govuln https://pkg.go.dev/vuln/GO-2026-6656
- 2026-10-23T19:13:43+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-73802
- 2026-10-23T19:35:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-73802

## From the sources

Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host namespace settings, expanded capabilities, and security profile overrides can remain effective despite Privileged being forced false. A workflow author able to run jobs on an affected Docker-backed runner can use these options to access host namespaces and execute commands as root on the runner host, bypassing the intended container isolation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_