CVE-2026-123009

The Gitea platform is vulnerable to code disclosure via the web editor when editing files in a fork . The root cause is an improper access control flaw where the system failed to verify if a user retained read access to a base repository when copying branches into a fork. Consequently, users who ...