Uncontrolled Recursion in Semantic MediaWiki by Semantic MediaWiki

CVE-2026-126562

What is CVE-2026-126562?

Semantic MediaWiki versions prior to 7.4.1 possess an uncontrolled recursion vulnerability in the ElasticStore's ConceptDescriptionInterpreter. This issue arises when users with page-edit rights create mutually referencing concept pages, which can lead to exhausting PHP memory or stack during queries such as page views, Special:Ask, or api.php action=ask. It's essential for administrators using affected versions to update their installations to mitigate potential performance impacts.

References