CVE-2026-86178 | Pixelfed up to 0.12.9 StoryComposeController information disclosure (EUVD-2026-71977)

A vulnerability labeled as problematic has been found in Pixelfed up to 0.12.9. The impacted element is an unknown function of the component StoryComposeController. The manipulation results in information disclosure. This vulnerability was named CVE-2026-86178. The attack may be performed from remote. There is no available exploit.