Email Management API Vulnerability in Gitea

CVE-2026-55986

What is CVE-2026-55986?

This vulnerability in Gitea's email management API allows unauthorized access by bypassing feature restrictions intended to manage credentials securely. This flaw can enable malicious actors to exploit the API, potentially leading to sensitive information exposure or unauthorized operations. Users are advised to update to the latest versions to mitigate this risk, as detailed in the Gitea release notes and security advisories.

References