CVE-2026-103446

Description

Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki WikiLambda extension: 1.46.

References

• https://gerrit.wikimedia.org/r/q/If2c05b109672fc65f63372f86c768859dc6639fd
• https://phabricator.wikimedia.org/T435086