CVE-2026-129525 | Gitea up to 28.3.x API/Issue Search/Milestone Pages privileges management

November 15, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Gitea up to 28.3.x. This vulnerability affects unknown code of the component API/Issue Search/Milestone Pages. The manipulation results in improper privilege management.

This vulnerability is known as CVE-2026-129525. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More