CVE-2026-117635 | Gitea up to 28.2.x Admin API /api/v1/admin privileges management

November 1, 2026 Yanac

A vulnerability has been found in Gitea up to 28.2.x and classified as critical. This affects an unknown function of the file /api/v1/admin of the component Admin API. The manipulation leads to improper privilege management.

This vulnerability is referenced as CVE-2026-117635. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More