{"uuid": "ffe062de-32a8-4a62-b2ef-fb7dfebc29f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59774", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117441000550518808", "content": "CVE-2026-59774 Gitea Org-mode file disclosure and code execution Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files include app.ini and its INTERNAL_TOKEN, the attacker can chain the disclosure with internal logger access to modify a Git hook and execute commands as the Gitea service account.\nhttps://www.cve.org/CVERecord?id=CVE-2026-59774https://github.com/go-gitea/gitea/security/advisories/GHSA-6v53-hr58-556rhttps://github.com/go-gitea/gitea/pull/38642https://blog.gitea.com/release-of-1.27.1/https://github.com/go-gitea/gitea/pull/38645https://github.com/go-gitea/gitea/releases/tag/v1.27.1#gitea #Gitea#CVE_2026_59774#bot", "creation_timestamp": "2026-10-14T19:50:55.157973Z"}