EP. 153: Gitea CVE-2026-60004 Exploited in Active RCE Attacks

The Digital Warfare Podcast · Aug 31, 2026 · 4m · transcript

Summary

CVE-2026-60004 is a critical Gitea code-injection vulnerability that CISA added to its Known Exploited Vulnerabilities catalog on August 25. The vulnerability affects Gitea 1.17 through versions before 1.27.1 and carries a CVSS 3.1 score of 9.8.

The flaw allows an attacker with repository write access to abuse Gitea's diffpatch API to install an executable Git hook and execute shell commands as the Gitea service account. On installations allowing open registration, an external attacker may be able to obtain the required repository permissions simply by creating an account and…