Skip to content
Multiple Semantic MediaWiki Versions Expose Authorization Flaws

Multiple Semantic MediaWiki Versions Expose Authorization Flaws

First seen 27 Oct 2026, 17:17 UTC •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 27, 2026 at 18:17 UTC
  • •Semantic MediaWiki versions 2.5.0 to 7.3.0 have critical authorization flaws.
  • •The vulnerabilities allow unauthorized access via specific API methods.
  • •Immediate updates to version 7.3.1 or later are recommended to mitigate risks.

Semantic MediaWiki versions 2.5.0, 3.0.0, and 7.3.0 are affected by authorization vulnerabilities. The flaws allow unauthorized access through the smwtask API and isEditProtected methods, impacting all versions from 2.5.0 to 7.3.0. The vulnerabilities are categorized under CWE-862 for missing authorization. The affected systems include Semantic MediaWiki installations prior to version 7.3.1. Current advisories recommend immediate updates to mitigate risks. GitHub Security Advisories have documented these vulnerabilities, with CVEs GHSA-rjqv-6r83-pg8v and GHSA-9824-67pm-c29j noted. No has been reported yet, but the potential for abuse exists.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-27
Vulnerabilities disclosed
Semantic MediaWiki vulnerabilities affecting versions 2.5.0 to 7.3.0 were disclosed, highlighting missing authorization issues.
VulnCheck
2026-10-27
Advisories published
GitHub Security Advisories published details on the vulnerabilities, including CVE identifiers for tracking.
VulnCheck
2026-10-27
Patch recommended
Users are urged to upgrade to Semantic MediaWiki version 7.3.1 or later to address the vulnerabilities.
VulnCheck

More articles in this cluster (3)

Common questions

Which versions are affected?
Semantic MediaWiki versions 2.5.0 through 7.3.0 are affected by the vulnerabilities.
Is there any active exploitation?
No active exploitation has been reported for these vulnerabilities at this time.
What should I do if I'm using an affected version?
Upgrade to Semantic MediaWiki version 7.3.1 or later to mitigate the vulnerabilities.