CVE-2026-125617 | Gitea up to 28.3.x Permissions information disclosure

November 15, 2026 Yanac

A vulnerability was found in Gitea up to 28.3.x. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component Permissions. Performing a manipulation results in information disclosure.

This vulnerability is reported as CVE-2026-125617. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More