CVE-2025-8110 is a critical-severity vulnerability. AttackerView checks Gogs sites for it with a live exploit check.
Detects vulnerable Gogs versions where the repository editor API follows symlinks without checking directory components. Any authenticated user can overwrite arbitrary files via symlink traversal and inject commands into .git/config for remote code execution.
Is your app exploitable through CVE-2025-8110?
Scan your domain free