Gogs 0-Day Vulnerability Exploited in the Wild to Hack 700+ Instances

Cybersecuritynews •Guru Baran • December 11, 2025

A critical zero-day vulnerability in Gogs, a widely used self-hosted Git service, is currently being exploited in the wild. Designated as CVE-2025-8110, this flaw allows authenticated users to execute a symlink bypass, leading to Remote Code Execution (RCE). As of this writing, no patch is available, and researchers estimate that over 50% of public-facing Gogs […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Gogs 0-Day Vulnerability Exploited in Over 700 Instances A zero-day vulnerability in Gogs, identified as CVE-2025-8110, is being actively exploited, allowing authenticated users to execute remote code. This flaw affects over 50% of public-facing Gogs instances, and as of now, no patch is available to mitigate the issue. 4 sources 94

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

CVE-2025-8110