Sensitive Information Exposure in Wikimedia Foundation Mediawiki EventBus Extension

CVE-2026-100241

What is CVE-2026-100241?

A vulnerability in the Mediawiki - EventBus Extension permits unauthorized actors to access sensitive information. This flaw, present in version 1.47.0-alpha, could potentially lead to data leaks and compromise user privacy. It is critical for users to ensure they are using updated versions of the extension and to implement additional security measures to mitigate risks associated with this exposure. Further details and discussions on this issue can be found in the related references.

References