CVE-2026-25779

Name of the Vulnerable Software and Affected Versions Gitea (affected versions not specified)

Description An open redirect exists due to improper validation within the urlIsRelative() function in modules/httplib/url.go. An attacker can bypass this validation by using directory traversal sequences combined with a back-slash in the redirect to parameter, allowing them to redirect users to an external domain. This can lead to phishing attacks, theft of OAuth or SSO tokens, leakage of sensitive information via the Referer header, and cache poisoning in environments using shared caches.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.