Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

According to its banner, the version of Gitea running on the remote host is prior to 1.27.1. It is, therefore, affected by a Remote Code Execution through diffpatch Git Hook Installation. An attacker with ordinary write access to a repository can execute arbitrary shell commands as the Gitea OS user. With default open registration, an unauthenticated visitor can obtain the required write access by registering an account and creating a repository.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
    (CVE-2026-60004)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f4af92f7-95ae-11f1-a6f7-b42e991fc52e advisory.

    Gitea reports     This release addresses the following security             vulnerabilities. Please upgrade as soon as possible.


            Unauthenticated arbitrary file read via the Org-mode             #INCLUDE directive.


            Remote code execution via the diffpatch API through Git hook             installation.


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
115456	Gitea < 1.27.1 Remote Code Execution	Web App Scanning	Component Vulnerability	Version Based	critical
445931	Alpine: multiple forgejo packages: security update to 15.0.6-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	critical
445931	Alpine: multiple forgejo packages: security update to 15.0.6-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	critical
334888	FreeBSD : gitea -- Multiple vulnerabilities (f4af92f7-95ae-11f1-a6f7-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-60004

critical

Tenable Plugins

critical

critical

critical

critical