Back Feeds.4Sysops

Critical Gitea Org

Feeds.4Sysops •IT News • August 5, 2026

A critical Gitea vulnerability lets unauthenticated attackers read files accessible to the service account through crafted Org-mode markup. CVE-2026-59774 affects versions 1.22.1 through 1.27.0 and is fixed in Gitea 1.27.1. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Gitea Vulnerability Exposes Server Files to Unauthenticated Attackers A critical vulnerability in Gitea, identified as CVE-2026-59774, allows unauthenticated attackers to read files accessible to the service account via crafted Org-mode markup. This flaw affects Gitea versions 1.22.1 through 1.27.0 and has been patched in version 1.27.1. The vulnerability poses a significant risk to organizations using affected versions, as it can lead to unauthorized access to sensitive server files. The issue was disclosed on August 5, 2026, and organizations are urged to update their Gitea installations immediately to mitigate risks. No evidence of active exploitation has been reported yet, but the potential for abuse remains high. 3 sources 72

Extracted Entities

Critical Gitea Org

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)