CVE-2025-62668: Insufficient permission checks in action=growthsetmentor

Published Oct 18, 2025

Updated

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Resource Leak Exposure.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39.

Affected Software

1 affected component

Wikimedia Foundation Mediawiki - GrowthExperiments Extension>1.39

Event History

Oct 18, 2025

CVE Published

via MITRE·04:39 AM

Data Sourced

via MITRE·04:39 AM

DescriptionWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-62668?

CVE-2025-62668 is categorized as a critical security vulnerability due to incorrect default permissions leading to resource leak exposure.

How do I fix CVE-2025-62668?

To remediate CVE-2025-62668, update the Mediawiki - GrowthExperiments Extension to version 1.39 or later.

What causes CVE-2025-62668?

CVE-2025-62668 is caused by incorrect default permissions settings in the Mediawiki - GrowthExperiments Extension.

Which versions of Mediawiki are affected by CVE-2025-62668?

CVE-2025-62668 affects all versions of the Mediawiki - GrowthExperiments Extension before version 1.39.

Is CVE-2025-62668 exploitable remotely?

Yes, CVE-2025-62668 can be exploited remotely due to the nature of the resource leakage caused by incorrect permissions.