Critical Gogs Vulnerability Allows Attackers to Silently Overwrite Large File Storage Objects

Back Cyberpress

Critical Gogs Vulnerability Allows Attackers to Silently Overwrite Large File Storage Objects

Cyberpress • March 10, 2026

Share: View original

The flaw, tracked as CVE-2026-25921, carries a CVSS v3.1 score of 9.3 and affects Gogs versions 0.14.1 and earlier.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Gogs Vulnerability Enables Silent Overwrite of Large File Storage Objects A critical vulnerability in Gogs allows attackers to silently overwrite large file storage objects, posing a significant risk to users relying on this platform. The flaw could lead to unauthorized data manipulation without detection, affecting data integrity for organizations utilizing Gogs for version control and repository management. 3 sources 70

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)