CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-58053 — Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow...

·Source: NIST NVD

Updated:

Executive Summary

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-opt unchanged. A user who can run a workflow on a Docker-backed runner can create a job container with

Analysis

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-opt unchanged. A user who can run a workflow on a Docker-backed runner can create a job container with host namespaces and broad capabilities and escape to the host as root despite privileged mode being disabled. CVSS Score: 9.9. Published: 2026-06-28T02:16:32.420.

Indicators of Compromise (1)

CVE (1)
CVE-2026-58053
Source Attribution

Originally published by NIST NVD on Jun 28, 2026. Verified by: NIST.

Related Threats