CVE-2026-118386 | Gitea up to 28.2.x Workflow behavioral workflow

A vulnerability was found in Gitea up to 28.2.x and classified as critical. This impacts an unknown function of the component Workflow. The manipulation results in enforcement of behavioral workflow.

This vulnerability is identified as CVE-2026-118386. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More