Deserialization Vulnerability in Wikimedia Foundation MediaWiki Wikibase Extension

CVE-2026-103441

What is CVE-2026-103441?

A deserialization of untrusted data vulnerability exists in the Wikimedia Foundation MediaWiki Wikibase extension, potentially enabling the execution of executable code in files that are not typically executable. This issue raises significant security concerns as it affects multiple versions of the extension, including 1.46, 1.45, and 1.43, and may expose systems to unauthorized actions or malicious content. It is crucial for users and administrators to review their installations and apply timely updates to mitigate any risks associated with this vulnerability.

References