CVE-2026-96872 — WikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositions
Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Access…
Published: 2026-09-23 · CVSS: 2.9 · CVSS 4.0
Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7