CVE-2026-103446 — WikiLambda exposes anonymous execution of unsaved Abstract Wikipedia fragments

CVE-2026-103446

WikiLambda exposes anonymous execution of unsaved Abstract Wikipedia fragments PUBLISHED

Description (CNA)

Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki WikiLambda extension: 1.46.

Affected (CNA)

Vendor / product	Versions
The Wikimedia Foundation / MediaWiki WikiLambda extension	affected 1.46

CWE

CWE-639

References

https://phabricator.wikimedia.org/T435086
https://gerrit.wikimedia.org/r/q/If2c05b109672fc65f63372f86c768859dc6639fd

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.