CVE-2025-6592 Information disclosure in AbuseFilter
Attackers can view sensitive IP and username associations in AbuseLog when converting temporary accounts to permanent ones, exposing user privacy data.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-6592?
CVE-2025-6592 is a low-severity vulnerability in Wikimedia Foundation AbuseFilter, published on 2 Feb 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php.
This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0.
Weakness: CWE-284
Which versions are affected by CVE-2025-6592?
How do I fix CVE-2025-6592?
Upgrade to a fixed version.
Is CVE-2025-6592 being exploited?
There is no known exploitation of CVE-2025-6592 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2025-6592, GHSA-9r44-56w8-gqrx, UBUNTU-CVE-2025-6592.