[ CVE-2026-59774 · Published 14 Oct 2026 ]
Vulnerability in Gitea
CVSS 9.8
EPSS 28%No fix listed yet
[ Why it matters ]Priority signals
- EPSS: 28% chance of exploitation in the next 30 days (higher than 98% of CVEs)
- Critical severity: CVSS 9.8
[ Description ]Official description
Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files include app.ini and its INTERNAL_TOKEN, the attacker can chain the disclosure with internal logger access to modify a Git hook and execute commands as the Gitea service account.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.