CISA Warns of Gogs Path Traversal Vulnerability Exploited in Attacks

Cybersecuritynews •Abinaya • January 13, 2026

A critical warning a path traversal vulnerability in Gogs, a self-hosted Git service, that is being actively exploited in the wild. The vulnerability, tracked as CVE-2025-8110, was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog on January 12, 2026, signaling active exploitation by threat actors. CVE ID CVE-2025-8110 Vulnerability Type Path Traversal – Improper […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Warns of Actively Exploited Gogs Path Traversal Vulnerability The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical path traversal vulnerability in Gogs, a self-hosted Git service, to its Known Exploited Vulnerabilities catalog. Tracked as CVE-2025-8110, this vulnerability is being actively exploited in the wild, affecting users of the Gogs platform. 4 sources 58

Extracted Entities

Companies (2)

CISA Gogs

CVEs (1)

CVE-2025-8110