CVE-2025-61658 Special:GlobalContributions shows edits on wikis the viewer doesn't have access to

Low 1.3 Published 3 Feb 2026 Updated 3 Mar 2026

Attackers can view private edit history on restricted wikis via the GlobalContributions page, exposing sensitive user activity data.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-61658?

CVE-2025-61658 is a low-severity vulnerability in Wikimedia Foundation CheckUser, published on 3 Feb 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContributions/GlobalContributionsPager.Php.

This issue affects CheckUser: from * before 1.43.4, 1.44.1.

Weakness: CWE-22

Which versions are affected by CVE-2025-61658?

It affects 1 product.

Products include Mediawiki Checkuser.

How do I fix CVE-2025-61658?

No fix has been published for CVE-2025-61658 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-61658 being exploited?

There is no known exploitation of CVE-2025-61658 in the wild and no public exploit code.

Sources

Also known as GHSA-hx5c-rhqh-cc74.