{"id":"CVE-2026-103446","published":"2026-09-30T18:18:17.017","lastModified":"2026-10-06T19:17:39.550","description":"Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass.\n\nThis issue affects MediaWiki WikiLambda extension: 1.46.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-639"],"vendors":[],"products":[],"references":[{"url":"https://gerrit.wikimedia.org/r/q/If2c05b109672fc65f63372f86c768859dc6639fd","tags":[]},{"url":"https://phabricator.wikimedia.org/T435086","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}