Loop with Unreachable Exit Condition Vulnerability in MediaWiki GrowthExperiments Extension by Wikimedia Foundation

CVE-2026-39934

What is CVE-2026-39934?

The MediaWiki GrowthExperiments Extension by Wikimedia Foundation is affected by a loop with an unreachable exit condition, leading to potential infinite loops. This vulnerability can also be exploited through Time-of-Check to Time-of-Use (TOCTOU) race conditions, which may disrupt standard operations. Affected versions include 1.45.2, 1.44.4, and 1.43.7. Immediate updates are recommended to ensure system integrity and security.

References