CVE-2026-0669

Name of the Vulnerable Software and Affected Versions MediaWiki - CSS extension versions 1.39 through 1.44

Description An issue exists in the MediaWiki - CSS extension related to improper limitation of a pathname to a restricted directory, allowing for path traversal. This can potentially allow unauthorized access to files and directories on the system.

Recommendations MediaWiki - CSS extension version 1.39 is vulnerable and should be updated. MediaWiki - CSS extension version 1.40 is vulnerable and should be updated. MediaWiki - CSS extension version 1.41 is vulnerable and should be updated. MediaWiki - CSS extension version 1.42 is vulnerable and should be updated. MediaWiki - CSS extension version 1.43 is vulnerable and should be updated. MediaWiki - CSS extension version 1.44 is vulnerable and should be updated.