importantSYS.SOURCE: The Hacker News• 2026-08-05T16:34:23+05:30

Critical Gitea Vulnerability Allows Unauthenticated File Access via Org-Mode Markup

#vulnerability #gitea #security #file-access #devops

A critical vulnerability (CVE-2026-59774) in Gitea versions 1.22.1-1.27.0 allows unauthenticated attackers to read server files via Org-mode markup rendering. The flaw was fixed in version 1.27.1, but administrators must rotate credentials if exposure is suspected.

An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, no repository write access. A public repository and crafted Org-mode markup are enough. The flaw is fixed in Gitea 1.27.1.

The file-read flaw is tracked as CVE-2026-59774, rated Critical with a CVSS score of 9.8, and received its

Read original article

*** END OF TRANSMISSION ***

> IOWA-LED COALITION DEMANDS OPENAI TRANSPARENCY FOLLOWING AI SECURITY BREACH > TIME MAGAZINE DEPLOYS DISTINCT WEBSITE FOR AI BOTS WITH BUILT-IN AD FRAMEWORKS > MACPAW COLLABORATES WITH LIQUID AI TO ENABLE ON-DEVICE INFERENCE FOR APP DEVELOPERS > ROBINHOOD LAUNCHES VENTURE FUND II TO INVEST IN Y COMBINATOR STARTUPS > ANALYZING THE 6/6/6 DATING RULE USING STATISTICAL DISTRIBUTIONS > CRITICAL OVSWRAP LINUX KERNEL VULNERABILITY ENABLES LOCAL PRIVILEGE ESCALATION VIA OPEN VSWITCH > KALI365 PHISHING KIT EXPLOITS MICROSOFT AUTHENTICATION FOR CORPORATE DATA BREACHES > PSILOCYBIN THERAPY SHOWS EARLY PROMISE IN TREATING ANOREXIA NERVOSA > INDIAN EV STARTUP RIVER SECURES $120M SERIES C TO EXPAND PRODUCTION AND INTRODUCE NEW MODELS > CRITICAL GITEA VULNERABILITY ALLOWS UNAUTHENTICATED FILE ACCESS VIA ORG-MODE MARKUP> IOWA-LED COALITION DEMANDS OPENAI TRANSPARENCY FOLLOWING AI SECURITY BREACH > TIME MAGAZINE DEPLOYS DISTINCT WEBSITE FOR AI BOTS WITH BUILT-IN AD FRAMEWORKS > MACPAW COLLABORATES WITH LIQUID AI TO ENABLE ON-DEVICE INFERENCE FOR APP DEVELOPERS > ROBINHOOD LAUNCHES VENTURE FUND II TO INVEST IN Y COMBINATOR STARTUPS > ANALYZING THE 6/6/6 DATING RULE USING STATISTICAL DISTRIBUTIONS > CRITICAL OVSWRAP LINUX KERNEL VULNERABILITY ENABLES LOCAL PRIVILEGE ESCALATION VIA OPEN VSWITCH > KALI365 PHISHING KIT EXPLOITS MICROSOFT AUTHENTICATION FOR CORPORATE DATA BREACHES > PSILOCYBIN THERAPY SHOWS EARLY PROMISE IN TREATING ANOREXIA NERVOSA > INDIAN EV STARTUP RIVER SECURES $120M SERIES C TO EXPAND PRODUCTION AND INTRODUCE NEW MODELS > CRITICAL GITEA VULNERABILITY ALLOWS UNAUTHENTICATED FILE ACCESS VIA ORG-MODE MARKUP