CVE-2026-0669

A Path Traversal vulnerability exists in the MediaWiki - CSS extension versions 1.39, 1.40, 1.41, 1.42, 1.43, and 1.44 . The flaw stems from an improper limitation of a pathname to a restricted directory , which allows a remote attacker to manipulate file paths to access and read arbitrary files ...