Executive brief
Semantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated access to admin-only maintenance tasks
Affected products
- Packagist mediawiki/semantic-media-wiki
Junglewise Threat Intelligence
Severity: low · CVSS 3.1 · Published 2026-09-18
Technologies: mediawiki/semantic-media-wiki (Packagist). Vendors: Packagist.
Semantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated access to admin-only maintenance tasks