Missing Authorization in Wikimedia Mediawiki Translate Extension

CVE-2026-100378

What is CVE-2026-100378?

The Mediawiki - Translate Extension is vulnerable to a Missing Authorization issue that allows unauthorized access to functionalities not properly restrained by Access Control Lists (ACLs). This vulnerability affects specific versions of the extension, potentially exposing sensitive functionality to unprivileged users. It is crucial for users of affected versions to update to the latest release to mitigate this security risk.

References