CVE-2026-100377

Received Received - Intake

Exposure of Sensitive Information in MediaWiki WikiLambda Extension

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: wikimedia-foundation

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-09-25

Generated

2026-09-26

AI Q&A

2026-09-26

EPSS Evaluated

N/A

NVD

CVE-2026-100377

Affected Vendors & Products

Vendor	Product	Version / Range
wikimedia	mediawiki_wikilambda_extension	1.47.0_alpha

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability involves the exposure of sensitive information to unauthorized actors in the Wikimedia Foundation MediaWiki WikiLambda Extension. It affects version 1.47.0-alpha and has been fixed in the master branch.

Impact Analysis

If exploited, this vulnerability could allow unauthorized access to sensitive data, potentially leading to data breaches or leaks. Users of MediaWiki with the WikiLambda Extension version 1.47.0-alpha are at risk.

Compliance Impact

This vulnerability could lead to non-compliance with data protection regulations like GDPR or HIPAA if sensitive personal or health data is exposed. Organizations using the affected extension may face legal and regulatory penalties.

Mitigation Strategies

Update the Mediawiki - WikiLambda Extension to the latest version on the master branch to remediate the issue. Ensure no systems are running version 1.47.0-alpha.

Hi! I’m here to help you understand CVE-2026-100377. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70