CVE-2026-104627 | Gitea up to 28.1.0 OpenID Association Callback state improper authentication

October 18, 2026 Yanac

A vulnerability marked as critical has been reported in Gitea up to 28.1.0. Affected is an unknown function of the component OpenID Association Callback. Performing a manipulation of the argument state results in improper authentication.

This vulnerability was named CVE-2026-104627. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More