CloudBleepingComputerabout 2 hours ago
Hackers exploit critical Gitea auth bypass
1 min read
Hackers are actively exploiting CVE-2026-20896, an authentication bypass in Gitea's official Docker image. The flaw lets unauthenticated attackers impersonate any user by sending a single X-WEBAUTH-USER header. Gitea released versions 1.26.3 and 1.26.4 to fix the issue. Around 6,200 Gitea instances are exposed on the public web.
Level
Hype check
Tap to vote and see what everyone thinks.
