A vulnerability classified as critical has been found in Gitea up to 1.26.4. This vulnerability affects unknown code. This manipulation causes server-side request forgery.

The identification of this vulnerability is CVE-2026-58314. It is possible to initiate the attack remotely. There is no exploit available.