CVE-2026-116880: Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions
Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin because it overwrites the wpEditToken with a freshly generated valid token. Attackers can lure an authenticated smw-admin user to a malicious page that triggers schema setup, entity-disposal, or job actions, causing semantic data loss and resource exhaustion.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Installations running Semantic MediaWiki versions from 3.0.0 before 7.3.1 are affected when an authenticated user with smw-admin privileges visits attacker-controlled content.
What must an attacker do to exploit it?
The attacker must lure an authenticated smw-admin user to a malicious page. No attacker authentication is required, but the victim must interact with the malicious page.
What impact can successful exploitation have?
A successful request can trigger Special:SMWAdmin maintenance actions, including schema setup, entity disposal, or job actions. The stated consequences are semantic data loss and resource exhaustion.
What version resolves the issue?
The affected range is Semantic MediaWiki 3.0.0 through versions before 7.3.1, so version 7.3.1 is outside the reported vulnerable range.