CVE-2026-96872
WikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositions
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0.
| CWE | CWE-280 |
| Vendor | the wikimedia foundation |
| Product | mediawiki - wikilambda extension |
| Published | Sep 23, 2026 |
| Last Updated | Sep 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for the wikimedia foundation mediawiki - wikilambda extension
Be the first to know when new unknown vulnerabilities affecting the wikimedia foundation mediawiki - wikilambda extension are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
The Wikimedia Foundation / Mediawiki - WikiLambda Extension
0 < 1.47.0
References
Credits
bombobombone