---
id: 6929
title: "[CVE-2025-8110] Gogs 0-Day Exploited in the Wild"
cve: CVE-2025-8110
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit"
published_at: "2025-12-10T15:00:01Z"
tags: ["rce", "zero-day", "vulnerability", "symlink", "gogs", "cve-2025-8110", "git-service"]
phying_url: "https://phying.com/item/6929"
lang: en
---

# [CVE-2025-8110] Gogs 0-Day Exploited in the Wild

## Summary

Wiz found Gogs zero-day CVE-2025-8110 exploited in the wild: a symlink bypass of the CVE-2024-55947 fix lets authenticated users write outside the repo for RCE; 700+ instances hit, fixed in v0.13.4.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2025-8110
- **Published:** 2025-12-10T15:00:01Z
- **Original:** https://www.wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit
- **Phying News:** https://phying.com/item/6929