CISA Alerts on Actively Exploited Gogs Path Traversal Flaw

Gbhackers •Divya • January 13, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Gogs, a self-hosted Git service, to its Known Exploited Vulnerabilities catalog, warning that the flaw is being actively exploited in the wild. Critical Vulnerability Details Tracked as CVE-2025-8110, the vulnerability is a path-traversal flaw in Gogs’ improper symbolic link handling in the PutContents […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Warns of Actively Exploited Gogs Path Traversal Vulnerability The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical path traversal vulnerability in Gogs, a self-hosted Git service, to its Known Exploited Vulnerabilities catalog. Tracked as CVE-2025-8110, this vulnerability is being actively exploited in the wild, affecting users of the Gogs platform. 4 sources 58

Extracted Entities

CISA Alerts on Actively Exploited Gogs Path Traversal Flaw

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)