CVE-2026-112887 | Gitea up to 28.2.x Actions Task Token /api/v1/user/repos privileges management

November 1, 2026 Yanac

A vulnerability labeled as problematic has been found in Gitea up to 28.2.x. This issue affects some unknown processing of the file /api/v1/user/repos of the component Actions Task Token. The manipulation results in improper privilege management.

This vulnerability is reported as CVE-2026-112887. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More