importantSYS.SOURCE: The Hacker News• 2026-07-29T13:17:19+05:30

Critical Gitea RCE Vulnerability Allows Execution of Shell Commands via Git Hooks

#vulnerability #remote code execution #git security #open source

A critical remote code execution vulnerability (CVE-2026-60004) in Gitea allows attackers with repository write access to execute shell commands via malicious Git hooks. The flaw, patched in version 1.27.1, was exploitable via the /api/v1/repos/{owner}/{repo}/diffpatch endpoint without prior credentials due to default open registration.

Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.

Tracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The

Read original article

*** END OF TRANSMISSION ***

> PROFOUND ACHIEVES UNICORN STATUS WITH $180M SERIES D FUNDING IN 7 MONTHS > WONDER EXPANDS FOOD DELIVERY NETWORK WITH $425M DOORDASH PARTNERSHIP > AI-POWERED CAMERA APP DEVELOPED BY FORMER TIKTOK EXECUTIVES AIMS TO ENHANCE PORTRAIT PHOTOGRAPHY SKILLS > SCALING STARTUPS FROM PROTOTYPE TO PRODUCTION: INSIGHTS FROM TECHCRUNCH DISRUPT 2026 > INDIA INTRODUCES MERCHANT FEES FOR LARGE UPI TRANSACTIONS TO ENSURE FINANCIAL SUSTAINABILITY > FIREFOX 156 ENHANCES PDF VIEWER PERFORMANCE WITH 45% FASTER STARTUP > EVVY SECURES $40M TO ADVANCE WOMEN'S HEALTH RESEARCH VIA VAGINAL MICROBIOME DATA > GLOBAL BOND YIELDS REACH 2008-LEVEL PEAKS, IMPACTING MAJOR BORROWERS > TECHCRUNCH DISRUPT 2026 EXHIBIT OPPORTUNITIES CLOSING IN FOUR DAYS > PANEL: AN AGENT-DRIVEN RESEARCH WORKSPACE WITH CUSTOMIZABLE PANES> PROFOUND ACHIEVES UNICORN STATUS WITH $180M SERIES D FUNDING IN 7 MONTHS > WONDER EXPANDS FOOD DELIVERY NETWORK WITH $425M DOORDASH PARTNERSHIP > AI-POWERED CAMERA APP DEVELOPED BY FORMER TIKTOK EXECUTIVES AIMS TO ENHANCE PORTRAIT PHOTOGRAPHY SKILLS > SCALING STARTUPS FROM PROTOTYPE TO PRODUCTION: INSIGHTS FROM TECHCRUNCH DISRUPT 2026 > INDIA INTRODUCES MERCHANT FEES FOR LARGE UPI TRANSACTIONS TO ENSURE FINANCIAL SUSTAINABILITY > FIREFOX 156 ENHANCES PDF VIEWER PERFORMANCE WITH 45% FASTER STARTUP > EVVY SECURES $40M TO ADVANCE WOMEN'S HEALTH RESEARCH VIA VAGINAL MICROBIOME DATA > GLOBAL BOND YIELDS REACH 2008-LEVEL PEAKS, IMPACTING MAJOR BORROWERS > TECHCRUNCH DISRUPT 2026 EXHIBIT OPPORTUNITIES CLOSING IN FOUR DAYS > PANEL: AN AGENT-DRIVEN RESEARCH WORKSPACE WITH CUSTOMIZABLE PANES