CVE-2026-33541: Wikitide Tsportal

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. While validation correctly rejected invalid usernames, a side effect within a validation rule caused user records to be created regardless of whether the request succeeded. This could be exploited to cause uncontrolled database growth, leading to a potential denial of service (DoS). Version 34 contains a fix for the issue.

Affected products

• Wikitide Tsportal: before 34 (fixed in 34)

Published 2026-03-26. Last modified 2026-06-17.