CVE-2026-58517 — Blocked users can create and edit WikiLambda objects

CVE-2026-58517

Blocked users can create and edit WikiLambda objects PUBLISHED

Description (CNA)

Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4.

Affected (CNA)

Vendor / product	Versions
The Wikimedia Foundation / Mediawiki - WikiLambda Extension	affected * before 1.43.9,1.44.6,1.45.4

CWE

CWE-288

References

https://phabricator.wikimedia.org/T428833
https://gerrit.wikimedia.org/r/c/1305376

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.