New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

Home / Tech / New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

July 29, 2026 dirk 0 Comments 3 tags

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.

Tracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The

Source: The Hacker News

Explore More

About the security content of macOS Tahoe 26.6

About the security content of macOS Tahoe 26.6 Source: Hacker News

Leaked OpenAI financials show $38.5B loss and compute burn

Leaked OpenAI financials show $38.5B loss and compute burn Source: Hacker News

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that’s designed to gain