CVE-2026-39934 — Growth Experiments ReassignMenteesJob runs as an infinite loop

CVE-2026-39934

Growth Experiments ReassignMenteesJob runs as an infinite loop PUBLISHED

Description (CNA)

Loop with unreachable exit condition ('infinite loop') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This issue was remediated only on the `master` branch.

Affected (CNA)

Vendor / product	Versions
The Wikimedia Foundation / Mediawiki - GrowthExperiments Extension	affected 1.45; affected 1.44; affected 1.43; affected 0 before 1.43

CWE

CWE-835

References

https://phabricator.wikimedia.org/T418222
https://gerrit.wikimedia.org/r/c/1243874

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.