New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

Home / Tech / New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

July 29, 2026 dirk 0 Comments 3 tags

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.

Tracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The

Source: The Hacker News

Explore More

AI companies spend record sums on Washington lobbying

AI companies spend record sums on Washington lobbying Source: Hacker News

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion

Docker Sandboxes – Disposable, isolated sandboxes for AI agents

Docker Sandboxes – Disposable, isolated sandboxes for AI agents Source: Hacker News