Low severityNVD Advisory· Published Sep 23, 2026· Updated Sep 23, 2026

CVE-2026-96872

Description

Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Mediawiki - WikiLambda Extension: before 1.47.0.

Affected products

Wikimedia Foundation/Mediawiki Extensions Wikilambdallm-fuzzy
Range: <1.47.0

Patches

Vulnerability mechanics

References

gerrit.wikimedia.org/r/c/mediawiki/extensions/WikiLambda/+/1326392nvd
phabricator.wikimedia.org/T435085nvd

News mentions

No linked articles in our index yet.

cvss	0.065
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000