CVE-2026-100377: Wikimedia Foundation Mediawiki - Wikilambda Extension

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.

Affected products

Published 2026-09-25. Last modified 2026-09-28.