CVE-2026-116289 | Gitea up to 28.2.x Actions Runner Registration privileges management

SecurityVulns
Yanac

A vulnerability labeled as problematic has been found in Gitea up to 28.2.x. Affected by this issue is some unknown functionality of the component Actions Runner Registration. Executing a manipulation can lead to improper privilege management.

This vulnerability appears as CVE-2026-116289. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More