SecurityThe Hacker Newsabout 3 hours ago
Critical Gitea RCE Lets Writers Plant Git Hooks
1 min read
Gitea patched a critical remote code execution vulnerability tracked as CVE-2026-60004 with a CVSS score of 9.8. A user with repository write access can plant a Git hook via the diffpatch endpoint to run shell commands. The flaw affects versions 1.17 through 1.27.0 and is fixed in 1.27.1.
Level
Hype check
Tap to vote and see what everyone thinks.
