A security vulnerability has been identified in Gitea, a popular tool many web hosting clients use to host and manage code repositories for their development projects. The issue is a code injection flaw that allows an attacker who already has write access to a Gitea repository to send a maliciously crafted patch to Gitea’s diffpatch API endpoint. If this exploit is successful, the attacker can plant a harmful Git hook (an automated trigger for Git operations) that runs shell commands on the server using the Gitea service account. For users who run Gitea instances for their projects, this could result in unauthorized access to data stored on your Gitea server, disruption of your Gitea service, or execution of unapproved commands on the server hosting your Gitea setup.
Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-60004
