PT-2026-55600 · Gitea · Gitea

CVE-2026-27657

Published

2026-07-03

Updated

2026-09-08

CVSS v3.1

7.5

High

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.25.5

Description A flaw allows a user to change the primary email address of another user.

Recommendations Update to version 1.25.5 or later.

Exploit

Fix

IDOR

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-27657

GHSA-4C8F-3M6H-M56R

GO-2026-6335

OPENSUSE-SU-2026:21812-1

Gitea