CVE-2026-103504 | Gitea up to 1.27.3 API Permission permission

October 6, 2026 Yanac

A vulnerability was found in Gitea up to 1.27.3. It has been classified as problematic. The impacted element is an unknown function of the component API Permission Handler. Performing a manipulation of the argument permission results in permission issues.

This vulnerability is identified as CVE-2026-103504. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More