CVE-2026-52811 | Gogs up to 0.14.2 on Linux /hooks/post-receive path traversal (GHSA-89mr-xqfv-758m)

June 25, 2026 Yanac

A vulnerability was found in Gogs up to 0.14.2 on Linux. It has been classified as critical. Impacted is an unknown function of the file /hooks/post-receive. This manipulation causes path traversal.

The identification of this vulnerability is CVE-2026-52811. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More