CVE-2026-58033

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.46.0 MediaWiki versions prior to 1.45.4 MediaWiki versions prior to 1.44.6 MediaWiki versions prior to 1.43.9

Description Sensitive information may be exposed to unauthorized actors through the includes/Actions/InfoAction.Php file. Specifically, the total number of distinct authors statistic at the action=info endpoint fails to exclude revisions where the author name was deleted.

Recommendations Update to version 1.46.0 or later. Update to version 1.45.4 or later. Update to version 1.44.6 or later. Update to version 1.43.9 or later.