Skip to content
COOEY

EXPOSURES › CVE-2025-8110

CVE-2025-8110

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2026-01-12 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-8110 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 rceexploited-in-wildunpatched

Gogs exposed code execution through path traversal in PutContents API

Gogs, a version control system, suffered a path traversal vulnerability in its PutContents API that allowed for code execution. This vulnerability was actively exploited, indicating a severe security breach.

Shame score — Active exploitation leading to a severe security breach

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Gogs · vendorGogs · product
DESCRIPTION

Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.