Vulnerability in Wikimedia Foundation CheckUser Product Affecting User Information Services
CVE-2025-61649

1.1LOW

Key Information:

Vendor

Wikimedia Foundation

Status
Checkuser
Vendor
CVE Published:
3 February 2026

What is CVE-2025-61649?

A vulnerability in the Wikimedia Foundation's CheckUser service allows unauthorized access to sensitive user information through improper handling of input data. This issue arises from specific program files, which could enable attackers to manipulate user data retrieval processes, posing a severe risk to user privacy and system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

CheckUser 7cedd58781d261f110651b6af4f41d2d11ae7309

References

https://phabricator.wikimedia.org/T397396

CVSS V4

Score:
1.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.