A security flaw has been identified in Gitea, a code repository management tool used by many hosting clients to store and manage project code and development files. This is a code injection vulnerability. To exploit it, an attacker would need to already have write access to a Gitea repository. They could send a specially crafted file change (called a patch) to Gitea’s diff processing endpoint to install a harmful, automatically running Git hook script. If the exploit is successful, this malicious script runs commands on the server using the same permissions as the Gitea service account. This could let an attacker access, modify, or delete data stored in your Gitea repositories, or perform other actions tied to that service on your hosting account.
Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-60004
