SecurityThe Hacker Newsabout 2 hours ago
Critical Gitea Flaw Exposes Server Files
1 min read
Gitea versions 1.22.1 through 1.27.0 let unauthenticated attackers read any file the service account can access via crafted Org-mode markup, tracked as CVE-2026-59774 with a 9.8 CVSS score. Fixed in 1.27.1, which also patches remote code execution bug CVE-2026-60004. Self-hosted administrators should upgrade immediately.
Level
Hype check
Tap to vote and see what everyone thinks.
