CVE-2026-39937 | Wikimedia CentralAuth Extension up to 1.43.6/1.44.3/1.45.1 on Mediawiki removal of sensitive information

A vulnerability labeled as critical has been found in Wikimedia CentralAuth Extension up to 1.43.6/1.44.3/1.45.1 on Mediawiki. The affected element is an unknown function. Such manipulation leads to improper removal of sensitive information before storage or transfer.

This vulnerability is listed as CVE-2026-39937. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.