Resource Leak Exposure in Wikimedia Mediawiki CentralAuth Extension

CVE-2026-39937

What is CVE-2026-39937?

The Wikimedia Foundation Mediawiki CentralAuth Extension has a vulnerability that permits improper handling of sensitive information before it is stored or transferred. This flaw can lead to resource leak exposure, potentially exposing confidential data. The issue impacts non-release branches of the CentralAuth Extension, urging users to ensure they are using secured and updated versions.

References