CISA Warns of Active Exploitation of Gogs Vulnerability Enabling Code Execution

CISA has added CVE-2025-8110, a high-severity path traversal vulnerability in Gogs, to its Known Exploited Vulnerabilities catalog after detecting active exploitation. The flaw allows attackers to bypass symbolic link protections and achieve remote code execution by overwriting Git configuration files. Approximately 700 Gogs Show more