Back to the CVE list
CVE-2025-8110 CISA KEV · Actively exploited

Path traversal in Gogs

CVSS score

8.8

EPSS probability

%85.2

Risk score

15.0

Published

10 mo ago

OverviewPublic Exploits (12)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
eds1268/cve-2025-8110-ctf
GitHub

eds1268/cve-2025-8110-ctf

Public PoCSource updated: 13.10.2026 11:02:48
G
Ghxstsec/CVE-2025-8110
GitHub

Ghxstsec/CVE-2025-8110

Public PoCSource updated: 12.10.2026 15:07:50
G
Makis6/CVE-2025-8110
GitHub

Makis6/CVE-2025-8110

Public PoCSource updated: 01.10.2026 10:09:58
G
Waynehck8/CVE-2025-8110-POC
GitHub

Waynehck8/CVE-2025-8110-POC

Public PoCSource updated: 01.10.2026 05:56:12
G
r3vpwnx/CVE-2025-8110
GitHub

CVE-2025-8110 - Gogs <=0.13.x symlink bypass -> arbitrary file write as the Gogs process user

Public PoCSource updated: 08.09.2026 21:10:29
G
9xh4kv/CVE-2025-8110
GitHub

PoC for CVE-2025-8110: Authenticated RCE in Gogs via symlink bypass in PutContents API

Public PoCSource updated: 05.08.2026 21:29:43
G
ixZODiAK/CVE-2025-8110
GitHub

Gogs service Exploit and get the root user

Public PoCSource updated: 26.09.2026 13:19:35
G
Shirouuu/CVE-2025-8110-gogs-poc
GitHub

PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink

Public PoCSource updated: 15.09.2026 13:18:22
G
Xdezen/CVE-2025-8110
GitHub

Xdezen/CVE-2025-8110

Public PoCSource updated: 16.07.2026 17:54:43
G
joaquinrrr/CVE-2025-8110
GitHub

PoC exploit for CVE-2025-8110

Public PoCSource updated: 28.06.2026 00:06:03
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8110.yaml
Nuclei

Nuclei: Gogs <= 0.13.3 - Remote Code Execution

Exploit reference
N
http://wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit
NVD reference

http://wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-8110"