CVE-2026-25229 | Gogs up to 0.14.0 issue.go UpdateLabel access control

February 19, 2026 Yanac

A vulnerability was found in Gogs up to 0.14.0. It has been declared as critical. Affected by this issue is the function UpdateLabel of the file internal/route/repo/issue.go. Such manipulation leads to improper access controls.

This vulnerability is listed as CVE-2026-25229. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More