Unpatched zero-day in Gogs exploited to hack 700 Git servers

Back Cyberinsider

Unpatched zero-day in Gogs exploited to hack 700 Git servers

Cyberinsider • December 11, 2025

Share: View original

A previously unknown zero - day vulnerability in Gogs, a lightweight, self-hosted Git service, is being actively exploited in the wild.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Gogs 0-Day Vulnerability Exploited in Over 700 Instances A zero-day vulnerability in Gogs, identified as CVE-2025-8110, is being actively exploited, allowing authenticated users to execute remote code. This flaw affects over 50% of public-facing Gogs instances, and as of now, no patch is available to mitigate the issue. 4 sources 94

Extracted Entities

Attack Types (1)

Zero-day Exploit

Companies (1)