CVE-2026-100378: Missing permission check in the Translate sandbox doRemind action
Published Sep 25, 2026
·Updated
Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Mediawiki - Translate Extension: from before 1.46.1, 1.45.5, 1.43.10.
Affected Software
1 affected component
Wikimedia Foundation MediaWiki Translate Extension<1.46.1, <1.45.5, <1.43.10
Event History
Sep 25, 2026
CVE Published
via MITRE·08:50 PM
Data Sourced
via MITRE·08:50 PM
DescriptionWeakness
Frequently Asked Questions
1
Which Translate Extension releases are affected?
Affected releases are versions before 1.46.1, 1.45.5, and 1.43.10. Upgrade to the applicable fixed release for the MediaWiki branch in use.