CVE-2026-125423

The Gitea platform is vulnerable to command execution due to a race condition during repository auto-initialization . A user with repository creation permissions can push a crafted tree while initialization is incomplete, causing the system to follow a symbolic link and overwrite a server-side gi...