CVE-2026-89151

Forgejo versions prior to 16.0.4 are vulnerable to unauthorized access through restricted API tokens, specifically affecting the "allow maintainer edit" feature. This could potentially allow users to perform actions they should not be permitted to, posing a risk to repository integrity. Organizations using affected versions should prioritize updating to mitigate this low-severity vulnerability.