Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

A critical vulnerability (CVE-2026-59774) in Gitea versions 1.22.1 through 1.27.0 allows unauthenticated attackers to read files accessible to the service account. While a direct remote code execution exploit hasn't been publicly demonstrated, a complex chain involving Org-mode markup and internal hooks can lead to com…