CVE-2024-28080 is an authentication bypass vulnerability in Gitblit that affects the SSH service, allowing exploitation for users with public keys assigned to their accounts. The issue arose from the interaction between Gitblit's authentication code and the Apache MINA SSH library, where incorrect handling of public key authentication led to unintended successful logins. Version 1.10, released on June 14, 2025, addresses this vulnerability along with two others.