CVE-2026-89151
LOW3.5CVSS v3
—CVSS v2
0.23%
EPSS (exploit probability)
CWE-863CWE
Description
Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature.
CVSS v3 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
Affected routers (0)
No routers currently mapped to this CVE in our database.