CyberRota Analysis
AI-GeneratedA vulnerability exists that allows a bypass of the public-only scope for limited-visibility owners in repository and package categories, potentially exposing sensitive information. This issue is a residual effect following a previous fix, indicating that certain access controls may not function as intended. Organizations utilizing affected repository and package management systems should prioritize remediation to mitigate the risk of unauthorized access to restricted data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118