CVE-2026-58429

28th percentile - higher than 28% of all known CVEs

The vulnerability allows bypassing the public-only scope of personal access tokens in organization and permission endpoints. This means a token intended only for public operations can access operations requiring broader privileges.

Risk of unauthorized access to organizational functions and permission management, potentially leading to confidentiality and integrity breaches.

Update the system to a patched version and verify access token configurations to ensure scopes are properly enforced.