CVE-2026-29084Disclosure(forceu / gokapi)

LOWCVSS 4.6 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, the login flow accepts credential-bearing requests without CSRF protection mechanisms tied to the browser session context. The handler parses form values directly and creates a session on successful credential validation. This issue has been patched in version 2.2.3.

forceu CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/Forceu/Gokapi/security/advisories/GHSA-hcff-qv74-7hr4

Other references

https://github.com/Forceu/Gokapi/releases/tag/v2.2.3

Weakness type (CWE)

CWE-352

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

gokapi

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 1 classified signal
3 total mentions across 1 day

Affected systems

Vendors

forceu

Products

gokapi

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud216d
General
🚨*CVE* CVE-2026-29084 Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, the login flow accepts credential-bearing reques… https://www.cve.org/CVERecord?id=CVE-2026-29084 ----- Traducción: CVE-2026-29084 Gok… http://infoflow.cloud`
Post summary
The text provides a brief disclosure referencing CVE‑2026‑29084 and a specific login‑flow issue, but does not contain any PoC, exploit code, active exploitation, patch details, or false‑positive claim. The information is quite limited, warranting a low confidence assessment.
0000026
56 followersView on X
CVE@CVEnew216d
Disclosure
CVE-2026-29084 Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, the login flow accepts credential-bearing reques… https://www.cve.org/CVERecord?id=CVE-2026-29084
Post summary
The text announces the CVE‑2026‑29084 affecting Gokapi’s login flow before version 2.2.3, but it provides no proof‑of‑concept, exploit details, patch information, or evidence of active exploitation.
00000185
56.6K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash217d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-29084 - Gokapi: CSRF in Login Endpoint Intel Report: https://ift.tt/4NMg7Uq
Post summary
An alert identifies a CSRF flaw in Gokapi’s login endpoint, CVE-2026-29084, with an Intel report linked; no exploit, patch, or active exploitation details are provided.
0000034
343 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	forceu	gokapi	-	-	-

Explore more

Back to dashboard forceu CVEs gokapi vulnerabilities

What researchers are saying

CVE-2026-29084

Infoflowcloud@infoflowcloudGeneral

The text provides a brief disclosure referencing CVE‑2026‑29084 and a specific login‑flow issue, but does not contain any PoC, exploit code, active exploitation, patch details, or false‑positive claim. The information is quite limited, warranting a low confidence assessment.

CVE@CVEnewDisclosure

The text announces the CVE‑2026‑29084 affecting Gokapi’s login flow before version 2.2.3, but it provides no proof‑of‑concept, exploit details, patch information, or evidence of active exploitation.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

An alert identifies a CSRF flaw in Gokapi’s login endpoint, CVE-2026-29084, with an Intel report linked; no exploit, patch, or active exploitation details are provided.