{"metadata": {"vulnerability": "cve-2026-73802", "count": 12, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-08-13T16:50:59.169Z", "date_only": false, "value": "2026-08-13T16:50:59.169Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-73802", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-02T23:18:12Z", "date_only": false, "value": "2026-10-02T23:18:12Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-X4Q3-GCJ3-M6CF", "record": "GHSA-X4Q3-GCJ3-M6CF", "field": "published"}, {"timestamp": "2026-10-02T23:18:12Z", "date_only": false, "value": "2026-10-02T23:18:12Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-X4Q3-GCJ3-M6CF", "record": "GHSA-X4Q3-GCJ3-M6CF", "field": "modified"}, {"timestamp": "2026-10-08T01:00:07.174Z", "date_only": false, "value": "2026-10-08T01:00:07.174017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdb2edqq62l", "record": "CVE-2026-73802", "field": "creation_timestamp", "uuid": "4a1d8790-dd19-437e-b5fc-7e8a7e2fd03f", "content": "CVE-2026-73802 - gitea\nThe Gitea Runner may copy the host's system settings into the containers that run your automated tasks, even when the privileged option is turned off. This could let a job see or affect\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitea #Golang #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdb2edqq62l"}, {"timestamp": "2026-10-14T14:37:55.141Z", "date_only": false, "value": "2026-10-14T14:37:55.141Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-73802", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T14:37:55.141Z", "date_only": false, "value": "2026-10-14T14:37:55.141Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-73802", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:37:55.141Z", "date_only": false, "value": "2026-10-14T14:37:55.141Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Gitea", "record": "cve-2026-73802", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:17:24.670Z", "date_only": false, "value": "2026-10-14T15:17:24.670", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73802", "record": "FKIE_CVE-2026-73802", "field": "published"}, {"timestamp": "2026-10-14T16:04:39.483Z", "date_only": false, "value": "2026-10-14T16:04:39.483", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73802", "record": "FKIE_CVE-2026-73802", "field": "lastModified"}, {"timestamp": "2026-10-14T20:13:48.745Z", "date_only": false, "value": "2026-10-14T20:13:48.745545Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441090560981563", "record": "CVE-2026-73802", "field": "creation_timestamp", "uuid": "aa9cd1e1-88e5-4657-8ff7-ea7fb14ab9f2", "content": "CVE-2026-73802 Gitea Runner host isolation bypass through container options Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host namespace settings, expanded capabilities, and security profile overrides can remain effective despite Privileged being forced false. A workflow author able to run jobs on an affected Docker-backed runner can use these options to access host namespaces and execute commands as root on the runner host, bypassing the intended container isolation.\nhttps://www.cve.org/CVERecord?id=CVE-2026-73802https://github.com/go-gitea/gitea/security/advisories/GHSA-x4q3-gcj3-m6cfhttps://blog.gitea.com/release-of-runner-3.0.0/https://gitea.com/gitea/runner/releases/tag/v3.0.0#gitea #Gitea #GiteaRunner#CVE_2026_73802#bot", "url": "https://infosec.exchange/users/cve/statuses/117441090560981563"}, {"timestamp": "2026-10-16T06:55:08Z", "date_only": false, "value": "2026-10-16T06:55:08Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-DC26983", "record": "CLEANSTART-2026-DC26983", "field": "modified"}, {"timestamp": "2026-10-17T00:37:11.571Z", "date_only": false, "value": "2026-10-17T00:37:11.571936Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-DC26983", "record": "CLEANSTART-2026-DC26983", "field": "published"}]}