Sensitive Information Exposure in Wikimedia Foundation Mediawiki CentralAuth Extension

CVE-2026-100244

What is CVE-2026-100244?

A vulnerability in the Wikimedia Foundation's Mediawiki - CentralAuth Extension allows unauthorized actors to access sensitive information, potentially compromising user data. This issue is present in versions prior to 1.46.1, 1.45.5, and 1.43.10, leading to concerns about inadequate protection measures against unauthorized access. It is crucial for users to update to the latest versions to ensure their systems remain secure.

References