CVE-2026-97859 | Gitea prior 1.27.3/28.0.0 API Routes /api/v1/users username privileges management

October 18, 2026 Yanac

A vulnerability was found in Gitea. It has been declared as problematic. This affects an unknown function of the file /api/v1/users of the component API Routes. The manipulation of the argument Username results in improper privilege management.

This vulnerability is reported as CVE-2026-97859. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More