CVE-2026-116474 | Gitea up to 28.2.x User Registration /api/v1/user behavioral workflow

November 1, 2026 Yanac

A vulnerability described as problematic has been identified in Gitea up to 28.2.x. This vulnerability affects unknown code of the file /api/v1/user of the component User Registration. The manipulation results in enforcement of behavioral workflow.

This vulnerability is known as CVE-2026-116474. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More