CVE Catalog
CVE-2026-25718
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.43%
34th percentile - higher than 34% of all known CVEs
Summary
A vulnerability in Gitea before version 1.25.5 mishandles path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths.
Risk Assessment
An attacker could exploit this vulnerability to read sensitive files or write malicious content to the system, potentially leading to data confidentiality and integrity breaches.
Recommendation
Immediately upgrade Gitea to version 1.25.5 or later, which includes a fix for this issue.
Original NVD description (English source)
Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths.