1. Home
  2. CVE Database
  3. CVE-2026-2725
MEDIUM · 5.3

CVE-2026-2725

Incorrect authorization in the "submitted together" feature in Gerrit versions 2.12 and later allows an authenticated attacker with force push permissions on a secondary branch to bypass code review a...

Vulnerability Description

Incorrect authorization in the "submitted together" feature in Gerrit versions 2.12 and later allows an authenticated attacker with force push permissions on a secondary branch to bypass code review and forcefully submit code to restricted branches via a crafted submission matching the "topic" tag of an unapproved change.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
GoogleGerrit>= 2.12

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2026-2725?

CVE-2026-2725 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Incorrect authorization in the "submitted together" feature in Gerrit versions 2.12 and later allows an authenticated attacker with force push permissions on a secondary branch to bypass code review a...

How severe is CVE-2026-2725?

CVE-2026-2725 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-2725?

Check the references section above for vendor advisories and patch information. Affected products include: Google Gerrit.