CVE-2026-129337 | Gitea up to 28.3.x Git HTTP Push privileges management

November 15, 2026 Yanac

A vulnerability was found in Gitea up to 28.3.x. It has been rated as problematic. This affects an unknown part of the component Git HTTP Push. The manipulation leads to improper privilege management.

This vulnerability is traded as CVE-2026-129337. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More