Information Exposure Vulnerability in Wikimedia Foundation MediaWiki
CVE-2026-34091

5.5MEDIUM

Key Information:

Vendor

Wikimedia Foundation

Status
Mediawiki
Vendor
CVE Published:
11 May 2026

What is CVE-2026-34091?

The vulnerability manifests as an exposure of sensitive information to unauthorized actors in Wikimedia Foundation's MediaWiki software. This issue affects multiple versions, allowing unauthorized access to potentially sensitive data. Users of MediaWiki may find their information at risk if they operate versions prior to 1.43.7, or are using 1.44.4 or 1.45.2, which fails to adequately secure confidential data from prying eyes. Immediate action is recommended to mitigate these risks.

Affected Version(s)

MediaWiki * < 1.43.7, 1.44.4, 1.45.2

References

https://phabricator.wikimedia.org/T411305

CVSS V4

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.