Gitea creates server‑side Git hook directories and scripts with read/write/execute permissions for all users (mode 0777) and depends on the process umask to limit access. When the umask is permissive, such as 0000 or 0002, a local user who can reach the repository storage can add or modify a hook file. Upon the next Git operation, the Gitea service account will execute that file, enabling the local attacker to run arbitrary code with the privileges of the Gitea service process.

The affected product is Gitea (the open‑source Git management system). Versions prior to 1.27.3 are vulnerable; the issue has been closed in the 1.27.3 release.

The CVSS score of 5.8 indicates a medium severity vulnerability. EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog, so the likelihood of exploitation in the wild is not quantified. However, the attack requires only local access to the repository storage and a permissive umask, making the exploit straightforward for a local user with file‑system access. Successful exploitation leads to execution of arbitrary code under the Gitea service account, potentially compromising the entire instance.