CVE-2026-0798 | Gitea up to 1.25.3 Notifications access control (GHSA-f4wq-6ww5-m56p)

A vulnerability identified as critical has been detected in Gitea up to 1.25.3. The affected element is an unknown function of the component Notifications Handler. The manipulation leads to improper access controls.

This vulnerability is documented as CVE-2026-0798. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.