Scribunto Plugin Vulnerability in Wikimedia Foundation
CVE-2026-34089

2.3LOW

Key Information:

Vendor

Wikimedia Foundation

Status
Scribunto
Vendor
CVE Published:
11 May 2026

What is CVE-2026-34089?

The vulnerability in the Scribunto plugin for Wikimedia Foundation arises from improper input validation, which could allow unauthenticated users to execute unauthorized actions or access sensitive content. This affects versions 1.45.0 through 1.45.1, making it essential for users to update to the latest version to mitigate potential risks associated with this issue.

Affected Version(s)

Scribunto 1.45.0 < 1.45.2

References

https://phabricator.wikimedia.org/T419168

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.