Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup
An unauthenticated attacker can read any file the Gitea service account can access in versions 1.22.1 through 1.27.0 using only a public repository and crafted Org-mode markup, with no login or write access required; the flaw is tracked as CVE-2026-59774,...