CVE-2026-103446

CVE-2026-103446: Anonymous WikiLambda fragment execution Reporter: Marco Paciaroni BomboBombone. The abstractwikirunfragment API did not check the permission required for caller-supplied unsaved fragments. Anonymous requests could therefore send native implementations to the configured WikiLambda...

Exploit for CVE-2026-103446

CVE-2026-103446: Anonymous WikiLambda fragment execution Repo...