Improper Authorization in Semantic MediaWiki by Semantic MediaWiki

CVE-2026-116876

What is CVE-2026-116876?

Semantic MediaWiki versions from 2.5.0 to 7.3.1 are vulnerable to an improper authorization flaw that permits regular editors to enforce permanent page protection. When the $smwgEditProtectionRight feature is enabled, the EditProtectionUpdater applies indefinite edit and move restrictions, failing to validate the rights of the author. This oversight can effectively lock out other editors and administrators from making necessary changes, posing a significant threat to content management and collaboration.

References