CVE-2026-34089 Wikimedia Foundation CVE debrief

Who should care

Administrators and users of Wikimedia Scribunto versions 1.45.0 to 1.45.1 should review and apply patches to mitigate this low-severity vulnerability. This includes operators managing Scribunto deployments, platform administrators, vulnerability management teams, and security teams responsible for ensuring the security of affected systems. Reviewing and applying patches or updates to Scribunto versions 1.45.0 to 1.45.1 is crucial to prevent potential exploitation of this vulnerability. Additionally, monitoring for and restricting exploitation attempts targeting vulnerable Scribunto installations can help minimize risk. It is also recommended to verify the Scribunto version and update to 1.45.2 or later if necessary to ensure the security of the system. This vulnerability has a CVSS score of 2.3, indicating low severity, but it is still important for affected parties to take appropriate measures to protect their systems. The information provided is based on available data and may not cover all aspects of the vulnerability, so it is essential to stay informed and follow up with the vendor or relevant security advisories for further guidance. Limited technical details are available, but it is clear that this vulnerability affects Scribunto versions from 1.45.0 before 1.45.2, and the CVSS score is 2.3, indicating low severity. Therefore, it is essential for administrators and users of affected versions to review and apply patches to mitigate this vulnerability effectively. The goal is to ensure the security and integrity of systems using Scribunto by applying necessary patches and taking appropriate defensive measures. This may involve reviewing system configurations, monitoring for potential exploitation attempts, and verifying the version of Scribunto being used. By taking these steps, administrators and users can help prevent potential exploitation of this vulnerability and maintain the security of their systems. It is also crucial to note that this vulnerability has not been modified since its publication on 2026-05-11T16:17:30.293Z, and the information provided is based on the available data at that time. Therefore, it is recommended to regularly review and up

Technical summary

A vulnerability was found in Wikimedia Foundation Scribunto, affecting versions from 1.45.0 before 1.45.2. The CVSS score is 2.3, indicating low severity. This vulnerability has a low CVSS score but still requires attention from administrators and users of affected Scribunto versions. Reviewing and applying patches or updates to Scribunto versions 1.45.0 to 1.45.1 is crucial to prevent potential exploitation of this vulnerability. The information provided is based on available data and may not cover all aspects of the vulnerability, so it is essential to stay informed and follow up with the vendor or relevant security advisories for further guidance.

Defensive priority

Low-priority defensive review recommended due to low CVSS score of 2.3.

Recommended defensive actions

• Review and apply vendor patches for Scribunto versions 1.45.0 to 1.45.1
• Monitor for and restrict exploitation attempts targeting vulnerable Scribunto installations
• Verify Scribunto version and update to 1.45.2 or later if necessary

Evidence notes

Evidence from official sources indicates a vulnerability in Wikimedia Foundation Scribunto, affecting versions from 1.45.0 before 1.45.2. Limited detail available on exploitability and impact. Defenders should verify version and apply patches. The CVE record was published on 2026-05-11T16:17:30.293Z and has not been modified since then. This information is based on available data and may not cover all aspects of the vulnerability.

Official resources