CVE-2026-125423 | Gitea up to 28.3.x Repository Initialization race condition

November 15, 2026 Yanac

A vulnerability classified as problematic was found in Gitea up to 28.3.x. The affected element is an unknown function of the component Repository Initialization. Executing a manipulation can lead to race condition.

This vulnerability is tracked as CVE-2026-125423. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More