Org-mode

Narrative intelligence for Org-mode: 1 tracked articles, claims, and spin patterns across AI and technology coverage.

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

A critical unauthenticated file-read vulnerability (CVE-2026-59774, CVSS 9.8) in Gitea versions 1.22.1–1.27.0 allowed attackers to exfiltrate arbitrary server files using only a public repository and malicious Org-mode markup — exposing sensitive data without authentication or write privileges.

Spin 0% Claim Present in Source

The Hacker News

Aug 5, 2026

Related Claims

01 An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0.

Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO