CVE-2026-117685 | Gitea up to 28.2.x Cross-Repository Blob Mount privileges management

November 1, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Gitea up to 28.2.x. The affected element is an unknown function of the component Cross-Repository Blob Mount. Performing a manipulation results in improper privilege management.

This vulnerability was named CVE-2026-117685. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More