CVE-2025-8110
Gogs · Published December 10, 2025
8.8
CVSS v3.1
HIGHCISA KEV — Federal agencies must patch by deadline
Actively exploited in the wild
Patch availableGet patch
Description
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.
Affected Products
- Gogs <= 0.13.3
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H