CVE-2026-109844 | Gitea prior 1.27.0/28.0.0 Subscription Access Check subscriptions permission

October 18, 2026 Yanac

A vulnerability classified as problematic has been found in Gitea. Affected by this issue is some unknown functionality of the file /api/v1/user/subscriptions of the component Subscription Access Check. The manipulation leads to permission issues.

This vulnerability is referenced as CVE-2026-109844. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More