A critical flaw in Gitea's official Docker image let anyone impersonate an admin with one forged header. Sysdig spotted the first exploitation attempts 13 days after the fix shipped.

Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896 on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

Attackers are exploiting the critical Gitea vulnerability CVE-2026-20896 to bypass authentication with a single HTTP header and access vulnerable repositories and secrets.

The post Critical Gitea Flaw Under Active Exploitation, Researchers Warn appeared first on SecurityWeek.