CVE-2026-126565

Name of the Vulnerable Software and Affected Versions Semantic MediaWiki versions 3.0.0 through 7.4.0

Description A denial of service issue exists in the ElasticStore and SPARQLStore ConceptDescriptionInterpreter classes. The problem occurs because concepts are re-expanded without memoization (a technique used to store results of expensive function calls) or an expansion budget. Users with page-edit permissions can create acyclic chains of Concept: pages that fan out, causing queries via concept page views, the Special:Ask page, or the api.php endpoint with action=ask to exhaust CPU and memory resources.

Recommendations Update Semantic MediaWiki to version 7.4.1 or later.