Back Cybersecuritynews

Gogs Vulnerability Enables Attackers to Silently Overwrite Large File Storage Objects

Cybersecuritynews •Abinaya • March 11, 2026

A critical security flaw has been discovered in a popular open-source, self-hosted Git service, allowing attackers to overwrite Large File Storage (LFS) objects secretly. Tracked as CVE-2026-25921, this maximum-severity vulnerability carries a CVSS 3.1 score of 10.0. It creates a severe risk for software supply-chain attacks. The flaw currently affects Gogs versions 0.14.1 and earlier, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Gogs Vulnerability Enables Silent Overwrite of Large File Storage Objects A critical vulnerability in Gogs allows attackers to silently overwrite large file storage objects, posing a significant risk to users relying on this platform. The flaw could lead to unauthorized data manipulation without detection, affecting data integrity for organizations utilizing Gogs for version control and repository management. 3 sources 70

Extracted Entities

Gogs Vulnerability Enables Attackers to Silently Overwrite Large File Storage Objects

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)