---
id: CVE-2025-68937
title: >-
  Forgejo before 13.0.2 allows attackers to write to unintended files, and
  possibly obtain server shell access, because of mishandling of
  out-of-repository symlink destinations for template repositories
summary: >-
  Forgejo before 13.0.2 allows attackers to write to unintended files, and
  possibly obtain server shell access, because of mishandling of
  out-of-repository symlink destinations for template repositories. This is also
  fixed for 11 LTS in 11…
severity: none
cwe:
  - CWE-61
published: '2025-12-26'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T10:10:00.193'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68937'
references:
  - url: 'https://blog.gitea.com/release-of-1.24.7/'
    label: cve@mitre.org
  - url: 'https://codeberg.org/forgejo/forgejo/milestone/27340'
    label: cve@mitre.org
  - url: 'https://codeberg.org/forgejo/forgejo/milestone/29156'
    label: cve@mitre.org
  - url: >-
      https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/11.0.7.md
    label: cve@mitre.org
  - url: >-
      https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/13.0.2.md
    label: cve@mitre.org
  - url: 'https://codeberg.org/forgejo/security-announcements/issues/43'
    label: cve@mitre.org
tags:
  - nvd
  - exploit-available
epss: 0.00501
epssPercentile: 0.41113
exploits:
  github: 2
  githubRepos:
    - 'https://github.com/ClemaX/Gitea-Forgejo-CVE-2025-68937'
    - 'https://github.com/Scratchappy/CVE-2025-68937'
  checkedAt: '2026-10-13T10:22:37.868Z'
exploitAvailable: true
ingestedAt: '2026-10-13T10:22:03.521Z'
---

## Overview

Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for template repositories. This is also fixed for 11 LTS in 11.0.7 and later.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.