Type Vulnerability
CVE-2026-59774 has an estimated attack likelihood score of 0.283 (~28.3% estimated chance of exploitation in the next 30 days; 98.1th percentile) as of 2026-10-15.
Gitea
Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files
CVE-2026-59774
What this means
This is rated critical severity (9.8 out of 10). Current estimates put the chance of attack in the next 30 days at roughly 28%. Ask IT whether the affected products are in your estate.
Full vendor description
Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files include app.ini and its INTERNAL_TOKEN, the attacker can chain the disclosure with internal logger access to modify a Git hook and execute commands as the Gitea service account.
Scoring and exploitation
9.8/ 10
CVSS 3.1 base scoreCritical
Exploitable over the network without any account, and no one has to click or open anything. High impact on confidentiality, integrity and availability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability
Longer bar: easier to attack
Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredNonePR:N
User interactionNoneUI:N
ScopeUnchangedS:U
Impact
Longer bar: more harm
ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityHighA:H
- Elevated attack likelihood (~28.3% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
- Exploited in the wild
- Not confirmed in the
- Not reported
Weaknesses
CWE-22
References
6 links from the CVE record, grouped by site.
blog.gitea.com1 link
github.com4 links
Show 1 more from github.com
openwall.com1 link