Security Advisory
CVE-2026-28740
7.1
HIGH
Vulnerability Description
Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access.
Published Date
July 3, 2026
Official Source
NIST NVD Advisory