Authentication Bypass Vulnerability in Wikimedia AbuseFilter AuthManager

Publication date: 2026-02-02

Last updated on: 2026-02-04

Assigner: wikimedia-foundation

Description

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-02-02

Last Modified

2026-02-04

Generated

2026-07-06

AI Q&A

2026-02-03

EPSS Evaluated

2026-07-05

NVD

CVE-2025-6592

Affected Vendors & Products

Vendor	Product	Version / Range
wikimedia_foundation	abusefilter	From fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 (inc) to 1.43.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Wikimedia Foundation AbuseFilter, specifically in the program file includes/auth/AuthManager.Php. It affects versions before 1.43.2 and version 1.44.0. The exact nature of the vulnerability is not detailed in the provided information.

Impact Analysis

The impact details of this vulnerability are not provided in the available information. The CVSS base score is low (2.1), indicating a low severity, but specific impacts are not described.

Compliance Impact

There is no information available regarding how this vulnerability affects compliance with standards such as GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2025-6592. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70