CVE-2026-59774 | Gitea up to 1.27.0 Org-mode markup renderer app.ini path traversal

October 14, 2026 Yanac

A vulnerability identified as critical has been detected in Gitea up to 1.27.0. This vulnerability affects unknown code of the file app.ini of the component Org-mode markup renderer. The manipulation leads to path traversal.

This vulnerability is traded as CVE-2026-59774. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More